Security Engineer

The Senior Security Engineer is accountable for designing, implementing, and governing a resilient security posture across enterprise environments, including on-premises, hybrid, and cloud platforms. The role ensures the confidentiality, integrity, and availability of organizational systems and data through strong security architecture, operational controls, and risk-based decision making.

This position provides senior-level technical leadership across security domains, including identity and access management, network and platform security, encryption, logging, and system hardening. The engineer establishes and enforces security standards, reviews architectures, and drives consistent security implementation across global environments.

The Senior Security Engineer leads and oversees security risk assessments, threat modeling, vulnerability management, and penetration testing activities, translating findings into prioritized remediation plans aligned to business risk and operational impact. They deploy and manage cloud-native and enterprise security tools to monitor, detect, and remediate threats in a complex, global environment.

The role is responsible for maintaining alignment with applicable regulatory and industry frameworks (e.g., ISO 27001, NIST CSF / 800-53, CIS Benchmarks), supporting audits, and maintaining defensible technical documentation and evidence. Close collaboration with application, data, and infrastructure teams is required to embed security controls into system design, CI/CD pipelines, and deployment processes, promoting secure-by-design and automation-first practices.

As a senior practitioner, the engineer evaluates emerging technologies, threat trends, and architectural patterns, recommending improvements to security controls and operating models. They influence security strategy, contribute to roadmap planning, and mentor less experienced engineers to ensure the organization maintains a scalable, compliant, and resilient security capability.

Essential Job Functions:

• Strengthen the organization’s global security posture by designing and implementing security controls across enterprise, cloud, and hybrid environments.
• Play a pivotal role in the design, deployment, and maintenance of security tools and solutions that enhance overall cybersecurity operations worldwide.
• Conduct and oversee vulnerability assessments, penetration testing, and technical risk evaluations, ensuring findings are prioritized and remediated.
• Perform technical security assessments and audits to ensure compliance with organizational policies and regulatory standards (e.g., ISO 27001, NIST 800-53)
• Collaborate closely with cross-functional teams including applications, data, and infrastructure to seamlessly integrate security requirements into architecture, CI/CD pipelines, and deployment processes, embedding security at every level.
• Stay abreast of emerging global cloud security threats, technologies, and compliance frameworks to provide valuable recommendations for continuously improving the organization’s cloud security posture.
• Undertake other cloud and information security activities as needed to further enhance cybersecurity resilience across global operations.

• Bachelor’s degree in Computer Science, Information Technology, or a related field; or equivalent experience.
• Required certification(s) (One or more):
• Certified Information Systems Security Professional (CISSP)
• GIAC Cloud Security Essentials (GCLD)
• GIAC Public Cloud Security (GPCS)
• GIAC Cloud Penetration Tester (GCPN)
• Microsoft Azure Security Engineer Associate (AZ-500)
• ISC(2) Certified Cloud Security Professional (CCSP)
• Certified Information Security Manager (CISM)
• 5+ yrs of experience in cybersecurity or a related role, with a strong understanding of security principles, practices, and technologies including:
• Demonstrated experience designing and implementing security controls across enterprise and cloud environments.
• Hands-on experience with cloud security platforms and services.
• Experience conducting security assessments, architecture reviews, vulnerability management, and penetration testing.
• Experience supporting audits and compliance efforts against frameworks such as ISO 27001, NIST, or SOC 2.
• Strong experience collaborating with applications, infrastructure, and data teams.
• Proficiency with PKI, multifactor authentication, and enterprise identity services.
• Working knowledge of authentication and authorization protocols (e.g., SAML, OAuth, OpenID Connect).

Preferred Qualifications that Drive you Forward

• Advanced degree in a relevant field.
• Certifications such as:
• Certified Ethical Hacker (CEH)
• GIAC Security Essentials (GSEC)
• Microsoft Azure Fundamentals (AZ-900)
• Microsoft Security, Compliance, and Identity Fundamentals (SC-900)
• ISC(2) Certified Information Systems Auditor (CISA)
• CompTIA Cloud+
• CompTIA Server+
• CompTIA Security+
• Knowledge of cloud technologies and security best practices for platforms such as AWS, Azure, and GCP.
• Familiarity with SAP ERP S4/Hana and its security considerations.
• Understanding of industrial control systems (DCS/PLC/SCADA) and their unique security challenges.
• Strong business acumen to align cloud security strategies with organizational goals and objectives., Amazon Web Services (AWS), Architectural Services, Authentication, Benchmarking, Best Practices, Biology, Business Operations, Business Plan, CISM - Certified Information Security Manager, Chemistry, Cloud Computing, Computer Science, Computer Security, Continuous Deployment/Delivery, Continuous Improvement, Continuous Integration, Control Systems, Cross-Functional, Cryptography, Distributed Control Systems (DCS), Emerging Technology, Enterprise Protection, Ergonomics, Establish Priorities, GCP (Good Clinical Practices), GIAC - Global Information Assurance Certification, GSEC - GIAC Security Essentials Certification, Hybrid Cloud, ISO (International Organization for Standardization), Identity Data Management, Information Technology & Information Systems, Information/Data Security (InfoSec), International Operations, Internet Security, Maintain Compliance, Manufacturing, Medical Equipment, Mentoring, Microsoft Windows Azure, Network Security, OAuth, OpenID, Organizational Development/Management, Penetration Testing, Plumbing, Programmable Logic Controller (PLC), Regulations, Risk, Risk Analysis, Risk Management, SAP ECC (fka SAP R/3 and SAP ERP), Security Analysis, Security Architecture, Security Assertion Markup Language (SAML), Security Attacks, Security Auditing, Security Compliance, Security Monitoring, Supervisory Control and Data Acquisition (SCADA), Sustainability, Technical Leadership, Technical Writing, Threat Modeling, Threat and risk analysis (TRA), Trend Analysis, U.S. National Institute of Standards and Technology (NIST), Willing to Travel

At Lubrizol, we’re committed to providing a safe, inclusive, and empowering environment where you can do your best work-whether in a lab, on the production floor, or in a hybrid office setting. Depending on your role, your work environment may include:

• Standing, walking, or operating equipment for extended periods
• Working in a lab or manufacturing setting with appropriate PPE provided
• Use of computers and digital tools in an office or hybrid environment
• Occasional lifting or movement of materials
• Adherence to rigorous safety protocols and ergonomic standards

We continuously invest in our facilities and technologies to ensure they support your well-being, productivity, and growth. If you require reasonable accommodation, we are committed to working with you to ensure an inclusive and accessible experience.

Benefits that Empower You

• Competitive salary with performance-based bonus plans
• 401(k) match + Age-Weighted Defined Contribution
• Comprehensive medical, dental & vision coverage
• Health Savings Account (HSA)
• Paid holidays, vacation, and parental leave
• Flexible work environment
• Learning and development opportunities
• Career and professional growth
• Inclusive culture and vibrant community engagement

Learn more at benefits.lubrizol.com!

For nearly 100 years, The Lubrizol Corporation, a Berkshire Hathaway company, has been at the forefront of innovation to enhance everyday life, advance mobility, and make the modern world work better. Our specialty chemistry solutions-from engine oils, performance coatings, and skincare to medical devices and plumbing systems -are powered by the expertise, passion, and commitment of people like you. We tackle the world’s toughest challenges with science-based solutions, deeply understanding our customers to deliver innovative chemistry and differentiated value. Our inclusive culture, dedication to safety, and incredible global talent drive our success. Our solutions meet the evolving needs of the modern world-brought to life by science and, most importantly, delivered by you. Whether youre in the lab, on the production floor, or in the office, youll be part of a team around the world that empowers you to think boldly, drive results, and contribute to solutions that shape a better, more sustainable future.

We win because of you. Let’s build the future together.