> Markdown version of [/jobs/ext/1039285-it-security-engineer](https://www.wearedevelopers.com/jobs/ext/1039285-it-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Engineer - **Company:** Ken's Foods - **Location:** Marlborough, MA, United States - **Experience:** Expert - **Salary:** $125,000.0 - $135,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Access Network, Active Directory, Cyber Security, Networking Hardware, Python (Programming Language), Network Security, Log Analysis, Microsoft Office, Windows Servers, Network Segmentation, Open Web Application Security, Windows PowerShell, Role-Based Access Control, Remote Access Technology, Zero Trust Network Access, Virtual Machines, Information Technology, CIS Benchmarks, SentinelOne Expertise, Legacy Systems, Vulnerability Analysis - **Published:** June 4, 2026 - **Apply:** https://jobs.kensfoods.com/jobs/job-details/1963263829/it_security_engineer?change_lang=en ## About the Role * 5-8+ years of experience in IT security engineering, SOC, or incident response roles. * Strong hands-on experience with: Windows Server and client security; Network and firewall security; Endpoint security tools; MFA and identity systems. * Strong knowledge of Active Directory and identity security best practices. * Practical experience hardening servers, endpoints, and network devices. * Familiarity with log analysis and security event triage. * Comfort working directly with SOC alerts and vulnerability scan reports. * Understanding of security frameworks (NIST CSF, CIS Controls, SOC 2). * Strong documentation habits and process-oriented mindset., * Experience in manufacturing, industrial, or OT/ICS environments. * Working knowledge of PLCs, or ISA/IEC 62443 principles. * Familiarity with Office 365 security configuration and best practices. * Experience automating workflows using PowerShell or Python. * Exposure to segmentation projects or Zero Trust principles. * Relevant certifications: GSEC, GCED, GCIH, GDSA, GDAT, GICSP, GCIP, and GRID Work Authorization Notice: Please note that we do not provide visa sponsorship or immigration support for this position. Applicants must already be authorized to work in the United States on a full-time, permanent basis without the need for current or future sponsorship. ## Description We are seeking a highly technical, hands-on IT Security Engineer to help build and mature the cybersecurity program of a food & beverage manufacturing organization. This role is ideal for a driven, detail-oriented engineer who enjoys hardening systems, securing networks, performing technical investigations, and working side-by-side with IT and OT teams to improve our security posture. You will be the primary "hands-on keyboard" technical resource supporting cybersecurity initiatives and will partner closely with our IT teams, and our MSSP SOC., * Review alerts and escalations from the MSSP to validate severity, impact, and required actions. * Conduct technical investigation steps and support containment, eradication, and recovery activities. * Harden and secure Windows servers, Windows clients, virtual machines, and other IT infrastructure. * Ensure secure configuration, deployment, and management of endpoint protection (SentinelOne). * Collaborate with the IT infrastructure team to ensure secure configurations across firewalls, switches, and network segments. * Support network security improvements such as segmentation, least privilege network access, and secure remote access. * Perform firewall rule reviews and contribute to network hardening efforts. * Support secure configuration of identity platforms. * Enforce role-based access controls, privileged access hygiene, and identity hardening standards. * Work with the MSSP to ensure vulnerability scans are properly executed and tuned. * Validate findings, prioritize risk, and coordinate remediation work with system and network teams. * Lead patching and configuration remediation efforts for high-risk assets. * Work with developers to identify, prioritize, and fix security issues (OWASP Top 10). * Conduct security reviews of applications and servers. * Collaborate with OT engineers to understand legacy systems, PLCs, and plant-floor constraints and assist in implementation of OT network segmentation and ICS security controls. * Actively monitor emerging threats affecting OT and IT environments. * Conduct periodic threat modeling for high-risk applications and systems. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)