Senior Security Engineer

Shape the Future with Us. At Lubrizol, we’re transforming the specialty chemical industry through science, sustainability, and a culture of inclusion. As part of our global team, you’ll be empowered to make a real impact—on your career, your community, and the world around you. 

 

 

Job Type: Full-time/Onsite 4 days a week, with 1 flexible day from home.

Travel: < 5% (very limited)  

 

How You’ll Make an Impact

The Senior Security Engineer is accountable for designing, implementing, and governing a resilient security posture across enterprise environments, including on‑premises, hybrid, and cloud platforms. The role ensures the confidentiality, integrity, and availability of organizational systems and data through strong security architecture, operational controls, and risk-based decision making.

This position provides senior-level technical leadership across security domains, including identity and access management, network and platform security, encryption, logging, and system hardening. The engineer establishes and enforces security standards, reviews architectures, and drives consistent security implementation across global environments.

 

The Senior Security Engineer leads and oversees security risk assessments, threat modeling, vulnerability management, and penetration testing activities, translating findings into prioritized remediation plans aligned to business risk and operational impact. They deploy and manage cloud-native and enterprise security tools to monitor, detect, and remediate threats in a complex, global environment.

The role is responsible for maintaining alignment with applicable regulatory and industry frameworks (e.g., ISO 27001, NIST CSF / 800‑53, CIS Benchmarks), supporting audits, and maintaining defensible technical documentation and evidence. Close collaboration with application, data, and infrastructure teams is required to embed security controls into system design, CI/CD pipelines, and deployment processes, promoting secure‑by‑design and automation‑first practices.

 

As a senior practitioner, the engineer evaluates emerging technologies, threat trends, and architectural patterns, recommending improvements to security controls and operating models. They influence security strategy, contribute to roadmap planning, and mentor less experienced engineers to ensure the organization maintains a scalable, compliant, and resilient security capability.

 

Essential Job Functions: 

• Strengthen the organization’s global security posture by designing and implementing security controls across enterprise, cloud, and hybrid environments.
• Play a pivotal role in the design, deployment, and maintenance of security tools and solutions that enhance overall cybersecurity operations worldwide.
• Conduct and oversee vulnerability assessments, penetration testing, and technical risk evaluations, ensuring findings are prioritized and remediated.
• Perform technical security assessments and audits to ensure compliance with organizational policies and regulatory standards (e.g., ISO 27001, NIST 800-53)
• Collaborate closely with cross-functional teams including applications, data, and infrastructure to seamlessly integrate security requirements into architecture, CI/CD pipelines, and deployment processes, embedding security at every level.
• Stay abreast of emerging global cloud security threats, technologies, and compliance frameworks to provide valuable recommendations for continuously improving the organization’s cloud security posture.
• Undertake other cloud and information security activities as needed to further enhance cybersecurity resilience across global operations.

 

Required Qualifications that Enable Your Success

• Bachelor’s degree in Computer Science, Information Technology, or a related field; or equivalent experience. 
• Required certification(s) (One or more):
  • Certified Information Systems Security Professional (CISSP)
  • GIAC Cloud Security Essentials (GCLD)
  • GIAC Public Cloud Security (GPCS)
  • GIAC Cloud Penetration Tester (GCPN)
  • Microsoft Azure Security Engineer Associate (AZ-500)
  • ISC(2) Certified Cloud Security Professional (CCSP)
  • Certified Information Security Manager (CISM)
• 5+ yrs of experience in cybersecurity or a related role, with a str