IT Security Engineer

IT Security engineer

Job Description

Job Title: IT Security Engineer

Location: Montgomery, Alabama (On-Site)

Terms: Full-time / Salary

Company Overview

HD Hyundai Power Transformers USA, Inc. is a leading manufacturer of power transformers based in Montgomery, Alabama. Established in 2011 as a subsidiary of HD Hyundai Electric, we specialize in producing high-voltage power transformers for utility and industrial customers across North America. With a commitment to innovation, safety, and quality, we continue to grow as a trusted partner in the energy sector. Our mission extends beyond manufacturing—we aim to empower communities and support a sustainable future.

Job Purpose

This position is responsible for designing, implementing, and managing enterprise-wide cybersecurity programs across Information Technology (IT), Operational Technology (OT), and Physical Security environments. The role focuses on strengthening the organization's security posture through governance, security operations, risk management, compliance, and secure system implementation while ensuring business continuity and regulatory compliance.

Key Responsibilities

Security Governance & Compliance

• Develop, implement, and maintain enterprise-wide security policies, standards, procedures, and security governance frameworks covering IT, OT, and Physical Security
• Ensure compliance with corporate security requirements, cybersecurity regulations, and industry standards
• Coordinate internal and external security audits and maintain supporting documentation
• Perform security risk assessments and recommend mitigation strategies

Security Operations

• Administer and maintain enterprise security solutions including Endpoint Protection (EPP/EDR), Data Loss Prevention (DLP), Email Security, Web Security, CASB, Device Control, and Microsoft 365 Security
• Monitor security events, investigate alerts, and coordinate incident response activities
• Perform vulnerability assessments and coordinate remediation efforts across enterprise systems
• Manage security patching and hardening activities to reduce cyber risks

IT / OT Security

• Manage cybersecurity controls for both enterprise IT infrastructure and Operational Technology (OT) environments
• Develop security standards and best practices for Industrial Control Systems (ICS) and manufacturing environments
• Collaborate with infrastructure and operations teams to strengthen system security while maintaining operational availability
• Support network segmentation and secure communication between IT and OT environments

Identity & Access Security

• Implement and manage Identity and Access Management (IAM) policies
• Review user access rights and ensure compliance with the principle of least privilege
• Support Microsoft Entra ID security configuration and access governance

Application & Cloud Security

• Review and improve security controls for in-house developed applications
• Collaborate with software developers to implement Secure Development Lifecycle (Secure SDLC) practices
• Support security configuration and monitoring for Microsoft 365 and cloud-based services
• Identify security risks during application development and recommend appropriate mitigation controls

Security Awareness & Incident Response

• Develop and deliver cybersecurity awareness training programs
• Lead security incident investigations and coordinate containment, recovery, and root cause analysis
• Maintain incident response procedures and disaster recovery security requirements
• Monitor emerging cyber threats and recommend proactive security improvements

Documentation & Reporting

• Maintain security documentation, technical standards, and operational procedures
• Prepare security metrics, dashboards, and executive reports
• Recommend continuous improvements to enhance the organization's overall cybersecurity posture

Other duties as assigned

• Perform other duties as assigned

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent work experience
• Experience supporting enterprise cybersecurity technologies and security operations
• Working knowledge of Microsoft 365 Security, Microsoft Entra ID, Endpoint Security, and Identity & Access Management
• Understanding of cybersecurity principles including risk management, vulnerability management, and incident response
• Knowledge of IT and OT security concepts and cybersecurity best practices
• Ability to analyze security risks and recommend practical solutions
• Strong analytical, troubleshooting, and problem-solving skills
• Excellent written and verbal communication skills
• Ability to work independently and collaboratively in a cross-functional environment
• Proficient with Microsoft Office Suite (Outlook, Word, Excel, PowerPoint)
• Bilingual Korean-English is preferred

Preferred Qualifications

• Cybersecurity certifications such as CISSP, CISM, Security+, GSEC, CySA+, or equivalent
• Experience with Microsoft Defender, SentinelOne, Trellix, Proofpoint, Skyhigh Security, or similar enterprise security platforms
• Experience supporting manufacturing or industrial environments
• Knowledge of Operational Technology (OT) or Industrial Control System (ICS) cybersecurity
• Experience with security compliance frameworks such as ISO 27001, NIST Cybersecurity Framework, SOC 2, or IEC 62443
• Familiarity with Secure Software Development Lifecycle (Secure SDLC) and application security practices
• Experience with cloud security technologies and Microsoft 365 security administration
• Prior experience in a multinational or manufacturing environment

Core Competencies

• Strong organizational and time management skills
• Excellent interpersonal and problem-solving abilities
• High attention to detail and confidentiality
• Adaptability and willingness to take initiative
• Ability to work effectively in a cross-cultural and multilingual environment
• Proactive communication and collaboration skills

Compensation & Benefits

• Competitive salary based on experience and qualifications
• Annual performance-based bonus
• Comprehensive health, dental, and vision insurance
• Company-sponsored retirement savings plan (e.g., 401(k) or equivalent)
• Paid time off (vacation, holidays, sick leave)
• Visa sponsorship for eligible international candidates
• Relocation support (if applicable)
• Employee wellness programs and professional development opportunities

Equal Employment Opportunity & Applicant Privacy Statement (EEO)

HD Hyundai Power Transformers USA, Inc. is committed to equal employment opportunity for all qualified individuals. We prohibit discrimination based on race, color, religion, sex, national origin, age, disability, veteran status, or any other characteristic protected by applicable law. We collect and process applicant information solely for recruitment and employment purposes, and we take reasonable measures to protect this information. Your data will not be shared with unauthorized third parties and will be handled in accordance with company policy and relevant privacy laws.