Security Engineer - Identity and Endpoint security

Security Engineer

• Identity and Endpoint security 3.3 3.3 out of 5 stars 1 Kellogg Sq, Battle Creek, MI 49017 $123,040
• $153,800 a year
• Full-time WK Kellogg Co 26 reviews $123,040
• $153,800 a year
• Full-time At WK Kellogg Co, we exist to create joy and connection to inspire Gr-r-reat days.

We believe that doing good is always good for business and we have stood for this since Kellogg Company was founded more than 120 years ago. We are passionate about doing our part to make nutritious foods, create social connectivity and respect natural resources. Together, these actions create positive progress for people and the planet

• today and for years to come. We have big plans for how we are going to accomplish this, and we would love for you to join us in this effort. TheSecurity Engineer
• Identity and Endpoint securityrole, you will be a key player in keeping our users, data, and systems protected — with a specific focus on identity security, endpoint protection, and security monitoring.

You will work across our security tooling stack to investigate threats, drive improvements, and build smarter ways to protect the organization through automation. This is a great opportunity for someone who thrives in a fast-paced environment, enjoys solving complex security puzzles, and wants to make a real impact without being buried in bureaucracy.

HERE'S WHAT YOU'LL BE DOING

Identity Access Security Manage and monitor our identity platform (Microsoft Entra ID) — including user access, privileged accounts, and authentication policies Support the administration and day-to-day operations of CyberArk for privileged access management, including vault configurations, session monitoring, and access reviews Partner with IT and engineering teams to enforce least-privilege access and improve identity hygiene across the environment Investigate identity-related alerts, unusual sign-in activity, and potential account compromises Security Monitoring Threat Detection Work within Microsoft XDR (Defender suite) to monitor, triage, and respond to security alerts across endpoints, email, and cloud workloads Investigate security incidents end-to-end — from initial alert through containment, remediation, and lessons learned Tune detection rules and policies to reduce noise while ensuring meaningful threats don't slip through Collaborate with the broader security team on incident response exercises and tabletop scenarios Automation Continuous Improvement Build and maintain automation workflows to reduce repetitive manual work — think automated alert enrichment, provisioning/deprovisioning, reporting, and access reviews Use scripting (PowerShell, Python, or similar) to develop tools that improve the team's speed and effectiveness Identify areas where manual processes can be streamlined and take ownership of making them better Contribute to the development of runbooks, playbooks, and standard operating procedures Key Skills You can explain a security incident clearly to a non-technical audience without losing the important details You're comfortable owning problems — you follow through from identification to resolution You think about security at scale and look for ways to build processes that don't require constant human intervention You're collaborative — you work well across IT, engineering, and business teams You stay curious about how attackers think and keep up with the evolving threat landscape Qualifications 3-5 years in an IT security, security operations, or systems administration role Hands-on experience with Microsoft Entra ID (formerly Azure AD) — including Conditional Access, MFA, and identity governance Working knowledge of CyberArk or a comparable privileged access management (PAM) solution Familiarity with Microsoft XDR or Defender products (Defender for Endpoint, Defender for Identity, Defender for Office 365) Demonstrated ability to write scripts or automation — PowerShell, Python, KQL, or similar Preferred Experience with Microsoft Sentinel or similar

SIEM/SOAR

platforms Preferred Familiarity with cloud security concepts in Microsoft Azure or M365 environments Preferred Exposure to security frameworks such as

NIST, CIS

Controls, or

MITRE ATTCK

Preferred Relevant certifications (SC-200, AZ-500, CyberArk Defender, CompTIA Security+) Preferred Experience supporting a security awareness or phishing simulation program

Salary Range:

$123,040

• $153,800 Salary pay ranges are determined by role and level.

Within the range, the successful candidate's starting base pay will be determined based on factors including job-related skills, experience, certifications, qualifications, relevant education or training, and local market conditions. At WK Kellogg Co, our success depends on our most vital asset — our people. That's why we're committed to providing you with benefits and programs that support your Total Health and your journey to be and feel your best — physically, financially, emotionally, and socially. Although subject to change, the below are the benefits currently offered in association with this position: Incentive Plan bonus eligibility Health, dental and vision insurance Savings and Investment Plan with Company match and contribution Paid Time Off (includes paid sick time) 11 Paid Holidays Life Insurance, AD and D Insurance and STD/LTD Tuition reimbursement, adoption assistance for eligible employees Employee recognition program The above offerings are subject to the terms of WKKC policies, which will control in the event of a conflict with the above descriptions. Our comprehensive and competitive benefits not only deliver value to you and your family, but also offer choice to meet your unique needs and knowledge to empower confident decision-making.

ABOUT WK KELLOGG CO

At WK Kellogg Co, we bring our best to everyone, every day through our trusted foods and brands. Our journey began in 1894, when our founder W.K. Kellogg reimagined the future of food with the creation of Corn Flakes, changing breakfast forever. Since then, we have embraced the same spirit of innovation and entrepreneurship in everything we do, channeling our founder's passion and commitment to creating high quality and delicious products while fostering communities. Our iconic brand portfolio includesFrosted Flakes, Rice Krispies, Froot Loops, Kashi,Special K, Raisin Bran,Frosted Mini Wheats, andBear Naked. With a presence in the majority of households across North America, our brands play a key role in enhancing the lives of millions of consumers every day, promoting a strong sense of physical, emotional and societal wellbeing. Our beloved brand characters, including Tony the Tiger and Toucan Sam, represent our deep connections with the consumers and communities we serve. For more information, visitwww.wkkellogg.com. If we can help you with a reasonable accommodation throughout the application or hiring process, please emailTalentAssist@wkkellogg.com

THE FINER PRINT

The ability to work a full shift, come to work on time, work overtime as needed and the ability to work according to the necessary schedule to meet job requirements with or without reasonable accommodation is an essential function of this position. WK Kellogg Co is an Equal Opportunity Employer that strives to provide an inclusive work environment, a seat for everyone at the table, and embraces the diverse talent of its people. All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, disability, religion, national origin, gender, gender identity, gender expression, marital status, sexual orientation, age, protected veteran status, or any other characteristic protected by law.

For US applicants:

Where required by state law and/or city ordinance; this employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee's Form I-9 to confirm work authorization. For additional information, please follow this link. Let's create gr-r-reat days, WK Kellogg Co Recruitment