Security Engineer III

Grainger

. Assess and evaluate cybersecurity risks across technology systems, applications, networks, and infrastructure .

Posted 11/5/2026full-timeAliso Viejo • California • United StatesSeniorLead💰 $121,200 - $202,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in cybersecurity risk assessment, security controls implementation, and compliance with frameworks such as ISO 27001 and SOC 2. Proficient in vulnerability management, security testing, and communicating technical findings to diverse stakeholders.

Highest-signal resume keywords

Cybersecurity Risk AssessmentVulnerability ManagementMicrosoft Azure SecurityISO 27001 CompliancePenetration Testing

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity PrinciplesSecurity ControlsRisk Assessment PracticesVulnerability ScanningSecurity TestingRemediation PracticesTechnical Vulnerability EvaluationSecurity Policy InterpretationIncident AnalysisAudit Evidence Maintenance

Soft Skills

Communication SkillsIndependent JudgmentCollaboration

Tools & Technologies

Microsoft AzureFirewallsOffice NetworksEmployee EndpointsField Devices

Industry Keywords

CMMCPCI DSSSOC 2Compliance FrameworksSecurity Investigations

Tech Stack

Tools & technologies

AzureCloudCyber SecurityFirewalls

About the role

Key responsibilities & impact

Assess and evaluate cybersecurity risks across technology systems, applications, networks, and infrastructure
Implement and improve security controls and support secure system configurations and compliance with enterprise policies and standards
Support vulnerability management and remediation by analyzing assessments, testing results, and vulnerabilities, prioritizing findings, and coordinating corrective actions
Collaborate with technology, infrastructure, application, and engineering teams to evaluate security requirements and technical solutions
Lead security assessment and compliance-readiness activities, identify control gaps, coordinate remediation, and maintain audit evidence
Support security investigations and continuous improvement by analyzing incidents and technical findings, documenting results, and communicating risks and best practices
Evaluate security across employee and field devices, office networks, firewalls, and related IT systems
Assess Microsoft Azure cloud resources and configurations and recommend risk-based safeguards
Coordinate vulnerability scanning and penetration testing of deployed custom software, review findings, and support remediation
Coordinate security-control and compliance-readiness activities involving ISO 27001, SOC 2, CMMC, and PCI DSS frameworks

Requirements

What you’ll need

7+ years of cybersecurity or related IT/cloud security experience, including security improvements and compliance or audit-readiness under a recognized framework
Customer-facing software, vulnerability scanning, or penetration testing experience preferred
Bachelor’s degree in a technology-related field or equivalent relevant experience; strong candidates without a degree will be considered
Advanced degree in technology or engineering preferred
In-depth knowledge of cybersecurity principles, security controls, and risk assessment practices
Ability to evaluate security configurations, technical vulnerabilities, assessment findings, and control gaps
Knowledge of vulnerability management, security testing, remediation practices, and security investigations
Ability to interpret security policies, standards, and recognized compliance frameworks
Ability to analyze security issues and recommend practical security improvements using independent judgment
Ability to communicate security risks, technical findings, and recommended controls to technical and nontechnical stakeholders
Working knowledge of Microsoft Azure security controls, cloud configurations, and related security practices
Knowledge of employee endpoints, field devices, office networks, firewalls, and connected technology environments
Ability to interpret vulnerability-scanning and penetration-testing findings and coordinate technical remediation
Ability to apply ISO 27001, SOC 2, CMMC, PCI DSS, or similar framework requirements
Authorized to work in the United States now and for the foreseeable future; sponsorship is not available

Benefits

Comp & perks

Medical, dental, vision, and life insurance plans with coverage starting on day one
6 free sessions each year with a licensed therapist
18 paid time off (PTO) days annually for full-time employees
6 company holidays per year
6% company contribution to a 401(k) Retirement Savings Plan each pay period, with no employee contribution required
Employee discounts
Tuition reimbursement
Student loan refinancing
Free access to financial counseling, education, and tools
Maternity support programs
Nursing benefits
Up to 14 weeks paid leave for birth parents
Up to 4 weeks paid leave for non-birth parents