Senior Security Engineer

*This is a hybrid position based in Chanhassen, MN; candidates must be able to work on-site as required, and relocation assistance is not available.*

COMPANY SUMMARY

We are a family of companies providing innovative water treatment solutions and services to customers across the United States. As one of the nation’s largest full-service water treatment equipment distributors, we support every segment of the water and wastewater treatment industry. Our companies represent industry-leading equipment manufacturers and are recognized as leaders within their respective markets. Together, we offer a comprehensive product portfolio, value-added design support, and aftermarket parts and services to both municipal and industrial customers.

POSITION SUMMARY

The Senior Security Engineer serves as the technical lead for Vessco Water’s Information Security Program. This role is responsible for the design, implementation, administration, and continuous improvement of security technologies, security operations, vulnerability management processes, and technical security controls across the organization.

The Senior Security Engineer owns key security platforms and serves as the primary technical resource for security engineering, security operations, incident response, and security assessments. This role partners closely with infrastructure, applications, platform companies, business stakeholders, and third-party vendors to protect organizational assets, support acquisition activities, reduce risk, and improve overall security maturity.

This position also provides technical leadership in the secure adoption of emerging technologies, including Artificial Intelligence (AI), helping establish security guardrails, governance practices, and technical controls that enable the business to safely leverage AI capabilities while reducing organizational risk.

KEY DUTIES AND ESSENTIAL FUNCTIONS:

Security Platform Ownership

· Serve as primary administrator and technical owner for enterprise security platforms, including Arctic Wolf, end point EDR, email security technologies, and other security tools.

· Design, implement, and maintain security capabilities within the Microsoft cloud ecosystem, including Microsoft Defender, Microsoft Purview, Microsoft Intune, Microsoft Entra ID, Conditional Access, and related Microsoft security technologies.

· Maintain and optimize security monitoring, detection, and response capabilities.

· Manage security platform configurations, integrations, upgrades, and operational health.

· Evaluate and recommend new security technologies and capabilities.

· Develop and maintain platform standards, procedures, and documentation.

· Leverage automation and AI-enabled capabilities to improve security operations, threat detection, incident response, and overall program effectiveness.

Security Operations and Incident Response

· Monitor, investigate, and coordinate response to security alerts and incidents.

· Act as primary responder for tickets, alerts, and investigations generated by the organization’s third-party Security Operations Center (SOC).

· Perform security analysis to determine root cause, scope, impact, and remediation requirements for security events.

· Coordinate containment, eradication, recovery, and post-incident activities.

· Partner with managed security providers and technology teams to ensure timely remediation of security events.

· Lead vulnerability management activities, including identification, prioritization, tracking, and remediation coordination.

· Validate effectiveness of security controls through testing and review activities.

· Develop operational processes that improve security visibility and response effectiveness.

· Participate in incident response planning, tabletop exercises, and continuous improvement activities.

Security Assessment and Risk Management

· Lead post-acquisition and post-close security assessments for newly acquired companies.

· Develop and execute security integration plans for newly acquired companies, including identity, endpoint protection, email security, logging, vulnerability management, and Microsoft 365 security controls.

· Conduct internal security assessments, technical reviews, and risk evaluations.

· Document findings, recommendations, and remediation plans.

· Track remediation efforts and validate completion of corrective actions.

· Support cybersecurity due diligence activities related to mergers and acquisitions.

· Assess security risks associated with new technologies,