Senior Cyber Security Engineer, Supply Chain Security

As a member of Cyber Security Engineering & Operations team, you will be responsible for implementing and managing plant floor-facing cyber security technologies, understanding existing cyber security capabilities, and staying current on new and emerging solutions. You will also be responsible and accountable for recommending optimizations of current services, platforms and architecture whilst providing a technical perspective to inform and advance our plant floor security posture. A successful candidate will possess strong learning agility, keen intellectual integrity, a mature risk mindset and a robust background in automation KEY RESPONSIBILITIES Provide second-level support for existing Cyber Security infrastructure solutions focusing on Industrial Control Systems (ICS) cybersecurity Perform log analysis with supported tools, with the goal of isolating traffic passing or not passing across preventative technologies, and then formulating specific rule-bases to either efficiently allow or block such traffic. Provide advice, analysis and recommendations based on trends in the ICS cybersecurity space. Apply understanding of ICS security standards, frameworks, and best practices to design and engineering patterns. Design and deploy cyber security controls within ICS environments. Implement ICS monitoring and logging solutions supporting detection & response processes Balance customer service with the need to maintain a high-level of control over security environments Quickly identify and articulate security risks associated with planned ICS implementations Work with the project teams to identify and remediate control gaps using existing and proposed processes and technology Systematically problem-solve with a strong focus on continuous improvement Create and maintain cybersecurity network diagrams and other documentation. Leverage strong scripting skills to optimize and implement security solutions at scale Self-direct and contribute through cooperative team effort amongst peer groups MINIMUM QUALIFICATIONS Collaborate to establish and inform ICS design patterns focused on proactive threat detection, security control enforcement and incident response Excellent oral and written communication skills, including the ability to interact with people at various levels and the ability to build client and team relationships Knowledge of defensible security architecture and engineering principles and practices Provide clear written and verbal consulting to projects regarding ICS security architecture Experience presenting and communicating complex topics and concepts to an audience of varying functional knowledge Strong working knowledge of architecting and configuring SIEM, firewalls, intrusion detection and advanced threat detection, with a focus on applicability towards industrial control systems (ICS) A diverse background in network security solutions with the ability to innovate, support and inform security guidance in firewall, IDS/IPS, and web proxy A working knowledge of cyber security, cyber security technology, risk assessment and management Demonstrated knowledge of TCP/IP, routing protocols, switching, IPsec and SSL VPNs, load balancing, firewalls, DNS, DHCP, network monitoring and troubleshooting tools, packet analysis, etc. Knowledge of tools and techniques used by attackers to gain unauthorized access to enterprise and ICS systems Knowledge of security principles, best practices, and limitations in manufacturing environments Knowledge of networking concepts including BGP, OSPF and other routing protocols Demonstrated ability to work across organizational boundaries and influence others PREFERRED QUALIFICATIONS Excellent analytical and conceptual problem-solving skills, especially where there is ambiguity Prior experience with information security technologies, including boundary protection, endpoint protection, remote access, and security information and event management Strong understanding of Palo Alto firewalls and associated management tools Working knowledge of Agile Methodologies (Scrum/Kanban) Experience building sustainable, scalable, and efficient security tools and automation using industry standard scripting languages and best practices Strong organizational and project management skills with an ability to manage numerous, competing demands from internal and external stakeholders Strong analytic skills with a penchant for measuring what matters Discretion, integrity, and independent sound judgment in both designing and implementing processes Proficient in network analysis fundamentals and robust troubleshooting skills. Experience implementing and maintaining network security infrastructure across multi-region ICS environments ADDITIONAL CONSIDERATION Applicants must be currently authorized to work in the U.S. General Mills will not sponsor applicants for a U.S. work visa. The preferred location for this role is Minneapolis, MN however remote work-at-home applications will be considered. COMPANY OVERVIEW We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one other and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.