Cybersecurity Platform Engineer

Job Description

Link Snacks is seeking a Cybersecurity Platform Engineer to join our Global IT organization. This role is responsible for leading the development, configuration, automation, and continuous improvement of enterprise cybersecurity platforms, with a primary focus on Microsoft Defender, Microsoft Purview, cloud security capabilities, and identity and access management (IAM). The Cybersecurity Platform Engineer serves as the technical owner for key security tools and capabilities, ensuring they are properly designed, integrated, governed, monitored, and optimized to reduce risk and support business objectives.

This position requires deep hands-on engineering experience, strong cybersecurity fundamentals, and the ability to translate risk, compliance, and operational needs into scalable platform solutions. The Cybersecurity Platform Engineer will partner closely with infrastructure, networking, application, data, OT, and business teams to mature security controls across cloud, endpoint, identity, collaboration, and data protection environments. This role also requires strong automation, documentation, and communication skills to ensure security platforms are operationally sustainable, measurable, and aligned with global business needs.

KEY RESPONSIBILITIES

• Lead the engineering, administration, and continuous improvement of Microsoft Defender capabilities, including Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR, and related security integrations.
• Design, implement, and mature Microsoft Purview capabilities for data protection, information governance, data loss prevention, insider risk, eDiscovery support, retention, sensitivity labeling, and compliance-driven control enforcement.
• Engineer cloud security controls across Microsoft Azure and Microsoft 365 environments, including secure configuration baselines, cloud security posture management, workload protection, logging, alerting, policy enforcement, and remediation tracking.
• Lead identity and access management engineering activities, including Entra ID, Active Directory, Conditional Access, privileged access, access reviews, identity lifecycle automation, service accounts, guest access, and secure authentication patterns.
• Develop automation, scripts, integrations, and repeatable processes that improve security platform reliability, reduce manual effort, standardize controls, and support consistent enforcement across global environments.
• Partner with security operations, MDR, SIEM, infrastructure, network, application, data, and OT teams to integrate cybersecurity platforms with detection, response, vulnerability management, incident response, and operational workflows.
• Create and maintain security platform standards, configuration baselines, procedures, runbooks, diagrams, operational documentation, and audit-ready evidence supporting regulatory and cybersecurity framework requirements.
• Define and report platform health, control effectiveness, adoption, remediation progress, secure configuration status, and other actionable security metrics for technical teams and leadership stakeholders.
• Evaluate emerging cybersecurity platform capabilities, Microsoft security roadmap changes, cloud security trends, and industry best practices to recommend practical improvements that strengthen the organization’s security posture.
• Perform other duties as assigned.

Qualifications

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent professional experience.
• 4 + years of hands-on experience engineering, administering, or improving cybersecurity platforms across Microsoft security, cloud security, identity, endpoint, data protection, or security operations domains.
• Strong foundation in cybersecurity platform engineering, including endpoint security, cloud security, IAM data protection, compliance controls, automation, and incident response support.
• Proficient in Microsoft security and identity technologies, Windows, Linux, PowerShell, scripting, API-based integrations, and automation of security operations processes.
• Strong experience with Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Active Directory, Microsoft Sentinel, and Microsoft 365 security and compliance capabilities.
• Skilled in platform configuration, log analysis, alert tuning, dashboarding, control validation, secure baseline development, and remediation tracking.
• Proven ability to secure both IT and OT networks, including experience with incident response, alert triaging, and vulnerability management.
• Proficient in managing identity and access controls, including Active Directory administration and privileged access management.
• Skilled in executing cybersecurity strategies and enforcing technical policies across enterprise environments.
• Experienced in working with security frameworks and standards such as ISO 27001, NIST CSF, and GDPR.
• Capable of managing vendor relationships and coordinating with internal/external stakeholders on security incidents and compliance matters.
• Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control.
• In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems.
• Familiarity with security technologies and tools, including SIEM platforms, automated penetration testing tools, and cloud risk assessment methodologies.
• Knowledgeable in security design, technical governance, and third-party auditing practices.
• Ability to communicate complex technical issues clearly and effectively to both technical and non-technical audiences.
• Demonstrated discretion in handling sensitive and confidential information.
• Strong adaptability, time management, and independent problem-solving skills.
• Ability to remain composed under pressure and provide after-hours support when necessary.
• Willingness to travel up to 10% for training and business-related activities.

Preferred Qualifications

• Experience serving as the primary engineer or platform owner for capabilities such as Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Defender for Cloud, Tenable Nessus, BeyondTrust, Palo Alto, or similar enterprise security technologies.
• Experience developing scalable security platform roadmaps, improving control maturity, reducing manual operational effort, and translating security requirements into technical implementation plans.
• Cybersecurity certifications such as CISSP, CISM, CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience.
• Experience securing OT/industrial networks in manufacturing or consumer packaged goods environments.
• Familiarity with Power BI, Fabric, or similar tools for security data analysis and reporting.

Additional Information

The starting salarie for this role is $115,000.00 - $130,000.00. Actual salaries will vary based on several factors, including but not limited to external market data, internal equity, location, and candidate skill set and experience. Base pay is just one component of Link’ Snacks Total Rewards package for Team Members. Other rewards may include annual incentive and program-specific awards. Link Snacks provides a variety of benefits to eligible Team Members, including medical, dental and vision benefits, life and disability insurance, 401k participation, paid holidays, and paid time off.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by a Team Member to be successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

…