Information Security Lead

Working directly with the Vice President of Information Security, this role is designed for a highly autonomous security leader who combines strong technical depth with the ability to independently own and execute large-scale security initiatives. Operating within a lean corporate team, you will serve as the primary technical project owner for the security program across multiple operating companies. This is a builder role, not a maintenance or oversight position. You will be expected to architect, implement, and troubleshoot security controls from a blank canvas, while navigating business constraints across both corporate offices and 24/7 manufacturing environments.

Responsibilities

• Enterprise Tool Ownership: Take complete engineering ownership of the core security stack, including Microsoft 365, Microsoft Defender, Intune (MDM/MAM), Entra ID (Identity & Access Management), Rapid7, and Proofpoint.
• Strategic Security Architecture: Serve as an expert in security technologies and controls, driving decisions across infrastructure, identity, endpoint, and network security.
• Project Leadership: Own and lead end-to-end security projects to independently scope requirements, define and track project timelines, manage vendor relationships, coordinate with IT teams, and ensure on-time delivery without disrupting business operations.
• Incident Response & Root Cause Analysis: Investigate and perform root-cause analysis of issues including but not limited to: malware infections, data leakage, internal/external network abuse, and phishing attempts.
• Vulnerability Management & Remediation: Drive the internal vulnerability management program utilizing Rapid7, actively identifying, prioritizing, and remediating potential security exposures, misconfigurations, and noncompliance issues across the enterprise.
• Security Frameworks & Playbooks: Build and maintain security playbooks, standards, and procedures, acting as a creator of frameworks, not just a follower.
• Continuous Auditing: Perform technical audits on patch management, privileged access, endpoint detection and response, network devices, wired/wireless access, and user access.
• Additional Responsibilities:
  • Provide hands-on support across Active Directory, Entra, endpoint systems, network segmentation, and access control rules as needed.
  • Support and mature security awareness and phishing simulation programs.
  • Stay current on threat landscape, tooling, and security frameworks, applying knowledge directly to the environment.
  • Act as a trusted technical advisor to leadership across security and infrastructure decisions.

Requirements

• Bachelor’s Degree in Information Security, Computer Science, or Information Systems.
• ISC², GIAC, ISACA, SANS, CompTIA, Offensive Security, or CISSP security certification is preferred.
• 5-10+ years of hands-on experience in systems, network engineering, or security engineering roles.
• Proven ability to design and implement security solutions from scratch, not just support or monitor existing environments.
• Demonstrated experience owning and driving large-scale projects independently.
• Deep understanding of:
  • Networking fundamentals (firewalls, segmentation, routing)
  • Identity systems (Active Directory / Entra ID)
  • Endpoint security and EDR tools
  • Vulnerability management and patching strategies
• Strong experience with incident response and forensic analysis, including root cause investigation (not just remediation).
• Ability to operate without heavy reliance on MSSPs or external vendors.

Skills

• Strong security-first mindset, balancing business needs without compromising controls.
• Thrives in a highly autonomous environment with minimal oversight.
• Comfortable pushing through organizational resistance and change-management challenges.
• Highly curious with a strong desire to understand how systems work, not just tools.
• Excellent communication skills across technical and non-technical stakeholders.
• Ability to prioritize and execute multiple concurrent initiatives.

Physical Demands

• Lift up to 50 lbs.

Environmental Conditions

• Up to 10% travel is required.

Pay

The salary range for this position is $115,000 - $150,000 annually. Final compensation will be determined based on factors such as experience, education, qualifications, and other job-related criteria.

Benefits

For a full list of benefits please visit: hendrickson.com/benefits

Schedule

Full time