Security Lead Software Engineer

<p>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</p> <h2 class="text-heading-large">About the job</h2> <div class="mt4"> <p><strong>Who We Are</strong></p> <p>McMaster‑Carr is a leading e‑commerce company that industrial customers have trusted for more than 120 years. Our products help customers restore manufacturing lines quickly, keep operations running smoothly, and prototype the next generation of innovative products.</p> <p>We earn that trust by offering the right products, making them easy to find, and delivering them fast--so customers can solve problems with speed, precision, and confidence. This role is a pathway to senior engineering management and technical leadership—your growth is determined by your impact, not by tenure.</p> <p>&nbsp;</p> <p><strong>Our Culture</strong></p> <p>We intentionally cultivate a culture focused on clear execution and long‑term growth. We are responsible for securing systems that endure for decades and support the company’s long-term growth. That responsibility means engineering work starts with a deep understanding of the problem and its impact, grounded in clear ownership, open communication, and direct feedback. Our teams are trusted to make thoughtful decisions about how work gets done, balancing a high bar for quality with practical execution.</p> <p>&nbsp;</p> <p><strong>How You’ll Make an Impact</strong></p> <p>Our security engineering team protects the entirety of our IT and OT infrastructure: thousands of end-user devices across multiple facilities, automation equipment in distribution facilities, network devices and servers in company data centers, and our customer-facing eCommerce experience. You’ll identify, define and lead work to reduce the risks we face as a company.</p> <p>As a Lead Security Engineer, you’ll work on projects like:</p> <ul> <li><strong>Detection, Response, and Risk Prioritization: </strong>Building and improving detection and response capabilities and assessing vulnerabilities in context-- understanding which issues pose real risk in our environment and prioritizing remediation accordingly.</li> <li><strong>Security Engineering &amp; Automation: </strong>Developing custom security tooling, automation, and response playbooks that improve response speed and reduce operational noise.<strong> </strong>Designing scalable, maintainable security workflows that integrate cleanly with existing engineering systems.</li> <li><strong>Cloud &amp; Infrastructure Security: </strong>Designing and implementing scalable cloud security controls as we migrate and modernize our infrastructure, and<strong> </strong>researching and evaluating new security solutions.</li>