Applied AI and Security Engineer
Summary
Cybersecurity role at Aurora Organic Dairy: implement and monitor security tools, run vulnerability assessments, detect and respond to incidents, drive tabletop/BC-DR exercises, and train staff. Centered on firewalls, EDR/SIEM, and NIST/ISO 27001/CIS frameworks; despite the title, little applied-AI work is described.
The role of Applied AI and Security Engineer is to protect AOD digital assets, networks, and data from cyber threats by implementing security measures, monitoring for vulnerabilities and incidents, and responding effectively to mitigate risks and safeguard against potential breaches. They work to ensure the confidentiality, integrity, and availability of information systems, thereby maintaining the trust and operational continuity of the organization.
ESSENTIAL RESPONSIBILITIES
- Assist in the implementation, maintenance, and monitoring of cybersecurity measures and tools to protect the organization's systems, networks, and data.
- Perform regular security assessments and audits to identify vulnerabilities, recommend remediation actions and compliance.
- Monitor security events and alerts to detect and respond to potential security incidents in a timely manner.
- Educate and train staff on information system security best practices.
- Participate in the development and enforcement of cybersecurity policies, procedures, and standards.
- Collaborate with cross-functional teams to integrate security best practices into the design and implementation of new technologies and systems.
- Provide support and guidance to the service desk on security-related issues and best practices.
- Stay up to date on the latest cybersecurity threats, trends, and technologies through continuous learning and professional development activities.
- Assist in the investigation and resolution of security incidents, including root cause analysis and post-incident remediation efforts.
- Contribute to the development and improvement of security tools, processes, and methodologies.
- Assist with remediation testing and deployment for all AOD systems.
- Plan, develop, implement, and update company’s information security strategy.
- Participate in regular testing of Business Continuity, Disaster Recovery, Security Incident Response.
- Drive tabletop testing exercises with all of IT and OT, simulating intrusions and continuously improving the AOD IT Security Incident Response Plan, and AOD IT’s ability to respond effectively and quickly to any intrusion.
- Collaborate with IT Operations to ensure all CMDBs and BIAs are maintained and kept up to date.
OTHER REQUIRED RESPONSIBILITIES
- Excellent communication skills, especially when working with users or other IT team members to resolve technology issues.
- Periodic after-hours and weekend work required to resolve urgent problems and to carry out certain types of routine maintenance.
- Other duties as assigned.
COMPETENCIES REQUIRED FOR SUCCESS
Analysis Skills | Judgement/Decision Making | Pragmatism | |
Initiative | Follow Through | Problem Resolution | |
Excellence | Adaptability | Customer Focus | |
Team Player | Communication – Oral / Written | Initiative | Emotional Intelligence |
Organization / Planning | Independence | Creativity | Pragmatism |
KNOWLEDGE & EXPERIENCE
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent experience.
- Solid understanding of networking protocols, operating systems, and security principles.
- Knowledge of common cybersecurity technologies and tools, such as firewalls, intrusion detection/prevention systems, antivirus software, EDR, SIEM solutions, etc.
- Familiarity with industry standards and frameworks, such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, etc.
- Strong analytical and problem-solving skills, with the ability to think critically and creatively under pressure.
- Excellent communication and interpersonal skills, with the ability to effectively collaborate with team members and stakeholders at all levels of the organization.
- Relevant certifications, such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), etc., are a plus.
- Experience collaborating with outside partners such as Security Operations Centers and Managed Security Services Providers preferred.
- Prior experience in a cybersecurity-related role preferred.
PHYSICAL REQUIREMENTS
Must be able to work safely in plant and farm environments; to lift up to 50 lbs., work with equipment on the floor (under desks) and from a ladder. Regular standing, walking, bending, stooping, sitting in various positions for long periods of time. Use of hands to handle, grasp and reach with hands and arms for long periods of time. Climb, balance, kneel, crouch, and crawl. Available for regular scheduled travel to remote facilities via automobile or airline.