IT Security Engineer

It's fun to work in a company where people truly believe in what they are doing!

As an IT Security Engineer at Neogen, I play a vital role in safeguarding our global enterprise. I am responsible for a wide range of security processes and technologies. I collaborate closely with global teams to continuously improve our security posture. I perform planned security assessments of public and internal applications, and collaborate with skilled teams to remediate the findings. When there is a security alert or concern, my teammates know they can reach out to me for advice or escalation. I understand the work my colleagues do, and help them understand their role in security. Whether it's coordinating vulnerability testing, advising on secure configuration standards, or conducting investigations, I know that my work is reducing security risks across the organization.

Job Summary

As an IT Security Engineer at Neogen, I play a vital role in safeguarding our global enterprise. I am responsible for a wide range of security processes and technologies. I collaborate closely with global teams to continuously improve our security posture. I perform planned security assessments of public and internal applications, and collaborate with skilled teams to remediate the findings. When there is a security alert or concern, my teammates know they can reach out to me for advice or escalation. I understand the work my colleagues do, and help them understand their role in security. Whether it's coordinating vulnerability testing, advising on secure configuration standards, or conducting investigations, I know that my work is reducing security risks across the organization.

Essential Responsibilities

• Perform and coordinate vulnerability assessments and risk analyses for web applications, corporate networks, business apps, and more.
• Document findings of those assessments, and follow up to ensure remediation and validation.
• Continuously identify threats and develop vulnerability remediation plans, demonstrating a clear reduction of risks to the organization.
• Collaborate with our skilled global systems, network, client support, applications, and development teams (and more!)
• Act as the point of escalation for security alerts and concerns.
• Investigate security incidents, conduct investigations, and participate in incident responses.
• Proactively maintain SEIM system(s), including log flow management.
• Lead security design, whiteboarding, and soundboarding sessions.
• Creatively develop content and activities related to Neogen's Security Awareness program.
• Evaluate new technologies and processes that enhance security capabilities and reduce threats.
• Develop automation to handle and track incidents, analyze logs, apply mitigations, and perform repeatable tasks.
• Stay up-to-date on all industry trends, threat intel, changes in security policies, technologies, and regulations.
• Perform other duties as agreed upon with the supervisor.
• Travel Requirements: Up to 5% - 15% as needed

Education and/or Experience

• Preferred: Foundational background in IT infrastructure, system administration, enterprise networking, or software development (or multiple).
• Preferred: Purple team mindset, including experience with pentesting tools, web applications, SDLC processes
• Bachelor’s or Associates Degree in computer science, engineering, cybersecurity, or technology from a four-year college or university, with at least 2 years related experience; or equivalent combination of education and applicable experience.
• Skilled in a majority of these security related tools and concepts: IDS/IPS, vulnerability management, firewalls, IAM, authentication, encryption technologies, secure network architectures, secure application architectures, components of OSI and how to secure each layer, security awareness training methods, endpoint security systems, secure coding practices, DAST and SCA, securing windows/linux operating systems, virtualization technologies, database platforms, cloud security posture management.
• Knowledgeable with security frameworks, defensive security, security-in-depth practices, and related audit procedures.
• Comfortable with automation, scripting, and leveraging APIs.
• Practical experience with security incident investigation and response preferred.
• Excellent attention to detail, organization, project management, doc