The team you will be a part of

As a Cybersecurity Engineer, you will help secure Whirlpool’s infrastructure against both insider and outsider threats. You will help deploy and manage Whirlpool’s state-of-the-art security tools and platforms to identify threats, respond to incidents, and protect our global assets. Additionally, you’ll work collaboratively with other members of our Global Security team to investigate incidents, analyze attack methods, research new defense techniques and document procedures and standards. Successful candidates will need a strong foundation in Information Security and a strong desire for continuous learning.

This role in summary

Do you have what it takes to operate in a challenging, fun, and highly impactful role within a Fortune 200 company? Your problem solving, technical, and people skills will be necessary to protect Whirlpool from cyber threats globally. Defending the company’s 90,000+ employees, data and systems is the focus of your day to day activities. Your ability to adapt and learn in this dynamic environment will achieve success both personally and professionally, while being surrounded by like minded people that work together as a team. If you're looking for a challenging, yet rewarding career with a team that has a passion for success, we would like you on our team!

Your responsibilities will include

• Own, operate, and drive security engineering technology and operations.

• Design and build tools, processes and systems for automating access and posture management, threat detection and security observability and policy enforcement at scale in a complex environment.

• Evangelize and implement security best practices for critical production systems.

• Develop, enhance, and implement endpoint detection and response rules and tooling for endpoint devices

• Collaborate cross-functionally with our IT team in implementing security best practices and support security initiatives like DLP, certificate management, encryption, etc.

• Build tools and processes for automating security controls and monitoring at scale.

• Recommend and drive the adoption of technical security controls to strengthen security posture.

• Support security initiatives across the organization and harden our infrastructure against attack.

• Participate in security incident response and automate security event handling.

Minimum requirements

• Bachelor’s Degree

• 2+ years of experience in a Cybersecurity Engineering role

• Strong Technical proficiency in IAM, IGA, PAM, Endpoint Detection and Response, End-point protection, and encryption tools

• Experience with large scale IAM, password and Secrets management programs.

• Experience with Data Loss Prevention (DLP) programs and strategies.

• Experience with Vulnerability Management programs tools and processes.

Preferred skills and experiences

• Security certifications to include: CISSP, CISM, CCSP, CCSK.

• Experience with administration of various information security tools, ie, configuration & policy updates in EDR, and detection rule deployment, DLP policy configurations.

• Experience with identity protocols like LDAP, SCIM, SAM, OIDC and OAuth.

• Experience with Application and API Security Testing tools.

• Experience with monitoring and continuously assessing systems for security threats, including promotion of security policies and baselines.

• Experience with Service Management tools (Service Now, Jira, Zendesk etc…)

• Technical proficiency for creating standard operating procedures, technical specifications and standards.

• Technical understanding in digital forensics.

• Ability to work calmly under pressure in the face of adversity and threat activity

• Possess strong communication skills in oral and written form

• Ability to establish positive working relationships and garner influence with other functions

• Project management experience for full security system lifecycle and security tool upgrades, including business case development

• Self-motivated to own and solve difficult challenges and ability to motivate others to higher levels of performance and engagement

• Strong technical competence up and down the technology stack - user interface, applications, communications, infrastructure, database, network, storage, etc

• Strong desire and aptitude for continuous learning and keeping abreast of new and emerging technology.