Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 22 hours ago

Security Operations Engineer

CRB231 open roles

Where
St. Louis, MO, United States
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Operations EngineerCRB · St. Louis, MO, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CRB's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.5% of postings close within 7 days. Measured by our own scanner across the market. CRB postings stay open a median of 32 days.

Share of postings closed within
  1. 1.8%1 day
  2. 4.0%3 days
  3. 9.5%7 days
  4. 15.6%14 days
  5. 33.9%30 days
This job: posted 22 hours ago

CRB median: 32 days open

The posting

Company Description

CRB's nearly 1,800 expert professionals drive innovative, life-changing and life-saving solutions for manufacturers in the life sciences and food and beverage industries. Our mission, vision and core values put client satisfaction and employee experience at the center of everything we do. See us at crbgroup.com.

Job Description

The Security Operations Engineer serves to strengthen and advance the security, privacy, and operational resilience of our enterprise technology environment. This role serves as a key contributor in protecting CRB's infrastructure, endpoints, identities, SaaS platforms, cloud services, and business application

The position combines expertise in cybersecurity, security engineering, IT operations, compliance, and offensive security to design, implement, and continuously improve controls that reduce organizational risk while supporting business productivity. This position partners closely with IT, Legal, Compliance, Privacy, and business stakeholders to translate security and regulatory requirements into practical technical solutions, sustainable operational processes, and measurable outcomes.

This position reports to the Director of Security Engineering.

Work Mode: Hybrid schedule. In office three days per week.

Can be located in: Kansas City, MO, St. Louis, MO, Denver, CO, or Dallas, TX,

Responsibilities

Security Engineering & Operations

  • Serve as CRB's primary technical liaison to Managed Security Services Providers (MSSPs), overseeing security operations activities, vulnerability assessments, remediation efforts, and third-party service delivery.
  • Maintain and administer the enterprise security and privacy risk register, ensuring risks are identified, assessed, tracked, mitigated, and reported in accordance with established governance processes.
  • Develop, maintain, and enhance security policies, standards, procedures, control documentation, runbooks, user guidance, and incident response documentation in partnership with Security, Compliance, and Technology leadership
  • Lead audit readiness and compliance activities by coordinating evidence collection, validating control effectiveness, supporting assessments, and maintaining comprehensive audit documentation, including access records, change records, vulnerability findings, incident documentation, and remediation evidence
  • Implement, administer, and continuously improve security controls across cloud environments, SaaS platforms, and enterprise systems.
  • Own identity and access management processes, including Azure Entra ID, single sign-on (SSO), multifactor authentication (MFA), privileged access management, provisioning, and deprovisioning activities.
  • Support endpoint security, patch management, device compliance, configuration management, and asset lifecycle operations.
  • Maintain accurate inventories of technology assets, applications, user accounts, licenses, data flows, and system ownership.
  • Partner with IT teams and business stakeholders to improve secure configuration management, vulnerability remediation, backup and recovery capabilities, and operational resilience.
  • Evaluate new technologies, vendors, integrations, and data management practices to ensure alignment with security and privacy requirements.
  • Automate security and operational workflows using tools such as Python, PowerShell, Power Automate, Jira Automation, or comparable technologies.
  • Support security monitoring, incident investigation, containment, response, recovery, and continuous improvement activities.

Security Testing & Risk Assessment

  • Conduct authorized vulnerability assessments and penetration testing activities across infrastructure, networks, cloud environments, identity platforms, and enterprise applications.
  • Perform attack-path analysis and red-team exercises to identify security weaknesses, privilege escalation risks, and control gaps.
  • Analyze security events, threat intelligence, forensic evidence, and vulnerability findings to assess risk and business impact.
  • Document findings, establish risk ratings, identify root causes, and recommend practical remediation strategies.
  • Validate remediation activities through testing, evidence review, and control verification.
  • Support tabletop exercises, incident response simulations, and security control testing programs.
  • Ensure all testing activities are appropriately authorized, documented, and executed in accordance with organizational policies and business requirements.

Security, Privacy & Compliance

  • Support compliance with applicable privacy and security regulations, including GDPR, Germany's Federal Data Protection Act (BDSG), and Switzerland's Federal Act on Data Protection (FADP).
  • Promote Secure by Design and Privacy by Design principles throughout technology initiatives and operational processes.
  • Support data governance activities including records of processing, data flow mapping, retention controls, access reviews, and protection of sensitive information.
  • Partner with Legal, Privacy, Compliance, and business leaders on regulatory inquiries, vendor reviews, risk assessments, and remediation activities.
  • Translate regulatory, audit, contractual, and customer requirements into actionable technical and operational controls.
  • Assess third-party technology providers and document associated security and privacy risks.
  • Track security and compliance findings through closure and provide meaningful reporting to technical and business stakeholders.
  • Support CRB's security, privacy, and governance frameworks, including ISO and NIST-aligned initiatives.

Qualifications

Required

  • Bachelor's degree in Information Security, Information Technology, Computer Science, Business Administration, or a related field; equivalent experience.
  • Minimum of 3 years of experience in cybersecurity, IT operations, infrastructure management, endpoint administration, enterprise applications, or a related discipline.
  • Proven experience supporting enterprise endpoints, SaaS platforms, identity systems, and geographically distributed workforces.
  • Experience with vulnerability management, penetration testing, incident response, network security analysis, and digital forensics.
  • Experience administering Microsoft 365, Azure Entra ID, Intune, or comparable identity and endpoint management solutions.
  • Working knowledge of SSO, SAML, MFA, privileged access management, access provisioning, and least-privilege principles.
  • Demonstrated understanding of firewalls, intrusion detection and prevention systems, network security monitoring, operating system security, and common attack methodologies.
  • Experience automating technical processes using Python, PowerShell, or similar scripting languages.
  • Experience supporting audits, compliance reviews, technical documentation, evidence collection, and control testing.
  • Working knowledge of GDPR and familiarity with German and Swiss privacy regulations.
  • Proven strong analytical, problem-solving, organizational, and communication skills.
  • Demonstrated ability to manage multiple priorities, work independently, and drive cross-functional remediation efforts.

Preferred

  • Professional security certifications such as CompTIA Security+, Cloud+, OSCP, PNPT, GPEN, CEH, or comparable credentials.
  • Experience participating in penetration testing, red-team engagements, security labs, or adversary simulations.
  • Experience supporting business operations in Germany, Switzerland, Austria, or other European jurisdictions.
  • Experience with Microsoft Defender, SIEM platforms, EDR solutions, vulnerability scanning tools, and cloud security technologies.
  • Experience conducting third-party risk assessments and vendor security reviews.
  • Familiarity with ISO 27001, ISO 27701, ISO 42001, NIST Cybersecurity Framework, or similar governance frameworks.
  • Experience with Jira Service Management, Jira Assets, Confluence, SharePoint, Power BI, or related enterprise platforms

Additional Information

All your information will be kept confidential according to EEO guidelines.

CRB is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity Employer and it is our policy to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Employment is contingent on background screening.

CRB does not accept unsolicited resumes from search firms or agencies. Any resume submitted to any employee of CRB without a prior written search agreement will be considered unsolicited and the property of CRB. Please, no phone calls or emails.

CRB offers a complete and competitive benefit package designed to meet individual and family needs.

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CRB's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CRB's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CRB's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.