Note: The job is a remote job and is open to candidates in USA. Cox Farms, part of the Cox Enterprises family of businesses, operates sustainable controlled-environment agriculture facilities across North America. The Security Engineer will build and operate security controls protecting systems, networks, data, people, and operational technology, including administering security tools, monitoring alerts, managing vulnerabilities, and supporting incident response.
Responsibilities
- Deploy, administer, and continuously tune security tooling including: SIEM, EDR/endpoint protection, email security platforms, and network security appliances
- Own the day-to-day operation of the vulnerability management program including scan configurations, results analysis, remediation prioritization and tracking with infrastructure teams
- Implement and maintain identity and access management controls including conditional access policies, MFA enforcement, and access review processes in coordination with the Security Lead
- Configure and maintain the Microsoft security stack including Defender for Endpoint, Defender for Identity, and Entra ID security policies
- Monitor security alerts across all platforms; investigate, triage, and escalate incidents according to established playbooks
- Review cybersecurity assessments and technical findings to identify security gaps and support remediation efforts
- Perform technical security assessments and control testing to validate the effectiveness of security measures
- Assist with report writing related to investigations of information security breaches or network evaluations to identify or implement solutions to information security problems
- Support incident response activities including log analysis, evidence collection, containment actions, and post-incident documentation
- Implement and maintain security configurations for OT/IT boundary controls across greenhouse and facility environments
- Develop and maintain security runbooks, standard operating procedures, and configuration documentation
- Support phishing simulation programs, security awareness activities, and user security communications. Provide security-related technical support to Cox Farms’ computer users
Skills
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related field; or equivalent experience
- 2 years of experience in security engineering, security operations, or closely related technical security role
- Hands-on experience deploying and administering SIEM platforms and building effective detection and alerting content
- Proficiency with endpoint detection and response (EDR) tools, including platform configuration, policy tuning, and alert investigation
- Working knowledge of identity security, including: Entra ID, conditional access, privileged access management, and MFA implementation
- Experience with vulnerability scanning platforms, such as Qualys, Tenable, or equivalent, including scan configuration and results interpretation
- Strong understanding of common attack techniques and the ability to identify and investigate indicators of compromise
- Ability to communicate security findings and risk clearly to both technical peers and non-technical stakeholders
- Applicants must be authorized to work in the US without the need for employer sponsorship
- 3+ years of experience in security engineering, security operations, or closely related technical security role
- Expertise in an environment with operational technology, industrial control systems, or facility automation where IT/OT security boundaries are a real consideration
- Demonstrated proficiency with CrowdStrike Falcon Complete or similar managed detection and response platforms, including alert investigation, policy configuration, detection tuning, and coordination of response activities
- Experience with network security monitoring and the ability to interpret packet captures and flow data
- Background building security tooling and processes in a growth-stage and/or developing security environment
- CompTIA CySA+, GIAC GCED, CISSP, Microsoft Security certifications, or equivalent
Company Overview