Cybersecurity Engineer

Essential Job Responsibilities

General Summary: The Security Engineer designs, implements, and maintains technical security controls that protect enterprise IT and manufacturing OT environments across cloud, hybrid, and on-premises systems. This role strengthens TBA's security posture through secure architecture, baseline enforcement, detection and response improvements, and risk reduction while partnering with Corporate IT and Plant IT. Interfaces with customers, consultants and SOC to address issues and improvements.

Essential Job Functions

• Engineer and maintain security controls across endpoints, identity, network, and monitoring platforms.
• Design and deliver cybersecurity improvement projects from concept through implementation.
• Manage and deploy the enterprise data security program, including sensitivity labeling, data loss prevention policies, insider risk management capabilities, and ongoing control tuning.
• Manage data security posture management for AI workloads, including governance, risk visibility, and enforcement controls to ensure responsible and compliant use of AI technologies.
• Manage identity security posture, including conditional access policies, access reviews, and role assignment governance.
• Support Privileged Identity Management administration and access governance workflows to ensure least privilege, controlled elevation, and auditable access decisions.
• Support the Software Committee by assessing software risk, maintaining secure software use standards, and coordinating mitigation activities, including software restriction, removal of high‑risk or unsupported applications, and tracking remediation through approved governance and change management processes.
• Partner with Plant IT and DX/PE to implement IT/OT-aligned security controls for production systems.
• Support security monitoring, detection engineering, and incident response activities by gathering security logs, validating system and security configurations, and assisting with containment and remediation activities.
• Maintain accurate documentation of security configurations, baselines, and operational procedures to support audit, compliance, and risk management requirements.
• Support firewall rule implementation and validation aligned with standards.
• Lead security reviews and ensure remediation tracking to closure.
• Collaborate with network, infrastructure, operations, compliance and risk teams to improve security posture continuously.

Minimum Qualifications

• Bachelor's degree in IT, Computer Science, or related field or equivalent experience.
• 6+ years of cybersecurity or security engineering experience.
• Experience with cloud and hybrid environments (Azure preferred).
• Strong knowledge of identity and access management concepts.
• Experience with security platforms such as Entra ID, Defender, Intune, Purview, and SIEM tools.
• Understanding of incident response and log analysis.

Preferred Qualifications

• Experience with SIEM/SOAR and detection engineering.
• Familiarity with NIST or ISO cybersecurity frameworks.
• Experience in manufacturing or OT environments.
• Experience with enterprise security tools such as Cylance, Varonis, or SolarWinds.
• Extensive understanding of MS Active Directory.
• Prefer experience with SCCM, InTune, Commvault, Trend Micro.

Skills and Competencies

• Strong problem-solving and analytical skills.
• Ability to communicate effectively across technical and non-technical stakeholders.
• Ability to work independently in a fast-paced environment.
• Strong documentation and audit-readiness mindset.

Work Environment and Conditions

• Office: Open Office Environment, moderate noise level.
• Plant: N/A
• Travel: Must be willing to travel up to 10% of the time between the U.S., Canada, Mexico, and South America.
• Physical Demands: While performing the duties of this job, the team member is required to talk, see, and hear. The team member must be capable of walking, sitting, and standing for extended periods of time. May be occasionally required to lift up to 30 pounds. Ability to sit and work on a computer for extensive periods of time is required. The ability to travel by automobile and airplane are both required.

Benefits

• Competitive Compensation
• Eligibility for certain incentives and bonuses (e.g. Production Hourly KPI Achievement Quarterly Incentive or Salaried/Office Hourly KPI Annual KPI Achievement Bonus)
• Paid Time Off and Paid Holidays
• Affordable Medical, Dental and Vision Benefits
• 401k with Company Match
• Optional tax advantaged accounts, such as Health Savings Accounts (HSA), Flexible Spending Accounts (FSA), and Dependent Care Flexible Spending Accounts (DCFSA)
• Additional elective benefits are available