Senior Security Engineer

Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. Theres a seat at our table for you...

Position Summary:

The Senior Cybersecurity Engineer is a core technical leader within our Security Operations (SecOps) team responsible for designing automating and maintaining the organizations enterprise security architecture. Operating in a high-impact low-friction environment this role directly drives threat hunting detection engineering security validation and tool automation across enterprise cloud and hybrid environments. This role balances deep platform infrastructure operations with modern automation techniques (CI/CD Infrastructure-as-Code AI workflows) to maximize defensive coverage and empower SOC analyst operations.

What you will do:

Security Strategy and Leadership:

• Provide strategic leadership in the development and execution of cybersecurity strategies policies and frameworks.
• Collaborate with senior stakeholders to align cybersecurity initiatives with organizational goals and objectives.
• Stay updated with emerging cybersecurity trends threats and technologies to provide expert guidance and recommendations.

Threat Hunting & Threat Intelligence:

• Lead the SecOps threat hunting program across multi-platform operating systems enterprise cloud environments virtualized infrastructure and network open-source and proprietary threat intelligence (TTPs) into proactive baseline and reactive threat and expand automated hunt dashboards and threat hunting automation frameworks.

Security Architecture and Engineering:

• Aid in designing implementing and maintaining secure network architectures and infrastructure.
• Maintain log ingestion pipelines custom parsers data normalization models feed integrations and overall platform health of the SIEM/SOAR environment.
• Collaborate with cross-functional teams to evaluate and select security technologies and solutions.

Incident & Operational Response:

• Act as the Tier 2 technical escalation point and mentor for Security in critical Incident Response efforts root-cause investigations and the SecOps On-Call detailed investigations of security incidents perform root cause analysis and implement remediation measures.

Detection Engineering & Security Validation:

• Design build and tune custom detections in vendor-neutral rule languages and native SIEM/SOAR/EDR logic to eliminate false positives while maintaining robust detection posture.
• Execute automated and manual threat emulation/attack chains using open-source testing frameworks to continuously validate log ingestion rule efficacy and security external Red Team engagements and remediate identified visibility and control Automation & Infrastructure-as-Code (IaC):
• Build and manage Infrastructure-as-Code (IaC) configurations via version-controlled CI/CD pipelines for security workspaces and validation environments.
• Write maintain and integrate custom automation scripts (e.g. Python PowerShell) and SOAR playbooks to streamline analyst triage and system in developing tuning and integrating modern AI agent platforms and operational workflows into core SecOps pipelines.

When you will work:

• Monday to Friday 8am to 5pm
• Hybrid schedule 4 days in office in Wyoming MI or Atlanta GA with 1 day remote

What youll bring to the table:

• Bachelors Degree in Computer Science Information Systems or a related field required.
• Five to eight years previous related experience or an equivalent combination of education training and experience.
• Professional certifications such as CISSP CISM GIAC or CCSP are preferred.
• Proficiency with engineering and administering Enterprise SIEM SOAR EDR and NDR platforms.
• Extensive knowledge of cybersecurity principles technologies and best practices.
• Expertise with writing custom detection logic complex queries and log normalization.
• Strong understanding of enterprise IT infrastructure: Windows Linux Enterprise Cloud (IaaS/PaaS) Identity & Access Management (IAM) and Enterprise Networking.
• Experience writing automation scripts in Python PowerShell or in security incident response including forensic analysis malware analysis and threat intelligence.
• Demonstrated experience with threat hunting frameworks (e.g. MITRE ATT&CK) and security validation tools.
• Excellent leadership and communication skills with the ability to effectively communicate complex technical concepts to stakeholders at all levels.
• Proven ability to lead and mentor junior team members.
• Must have good customer service and time management skills.
• Ability to develop solutions to a variety of complex problems and reference established precedents and policies.