Information Security Engineer II

Collaborate with the Information Security team and IT, OT, and asset owners to reduce cyber risk by identifying, prioritizing, and remediating vulnerabilities across the Cooperative’s IT and Operational Technology (OT) environments, including manufacturing systems, industrial control systems (ICS), and plant networks.

Job Duties and Responsibilities:

• Own day-to-day execution and continuous improvement of the Vulnerability Threat Management (VTM) program

• Identify, analyze, prioritize, and track vulnerabilities across endpoints, servers, network devices, cloud workloads, Webservers and OT/manufacturing assets

• Analyze vulnerability data in the context of exploitability, asset criticality, business impact, and OT safety and availability constraints

• Coordinate remediation efforts with IT infrastructure, application owners, plant engineers, and operations teams, ensuring clear ownership and tracking

• Apply risk-based vulnerability management in environments where patching may be constrained by uptime, safety, regulatory, or vendor limitations

• Develop and maintain vulnerability dashboards, KPIs, and executive-level metrics to measure risk reduction and remediation effectiveness

• Ensure vulnerability management processes align with internal security standards, policies, and risk management practices

• Evaluate and continuously improve vulnerability management tooling, scanning coverage, asset visibility, and data quality

• Collaborate with cross-functional teams to promote secure configuration, patching best practices, and sustainable risk reduction

• Identify and implement automation opportunities to improve remediation efficiency, workflow integration, and reporting accuracy

• The requirements herein are intended to describe the general nature and level of work performed by employee, but is not a complete list of responsibilities, duties, and skills required. Other duties may be assigned.