Sr. Specialist, Information Security

LG Energy Solution Michigan Inc. (LGESMI) develops and manufactures large lithium-ion polymer batteries and packs for electric vehicle (EV) and energy storage applications. Come join the leader in advanced EV batteries! www.lgenergymi.com

Summary:

We are seeking an experienced Senior Security Specialist with a strong IT infrastructure background to help protect, secure, and continuously improve our organization's enterprise technology environment.

This role combines hands-on infrastructure knowledge with broad cybersecurity expertise across systems, networks, endpoints, identity and access management, cloud services, vulnerability management, security monitoring, and incident response.

The Senior Security Specialist will work closely with IT infrastructure, networking, and business stakeholders to identify security risks, implement effective security controls, drive remediation efforts, and ensure security is integrated into technology operations and projects.

The ideal candidate understands how enterprise infrastructure is designed, deployed, maintained, and supported and can apply that knowledge to identify vulnerabilities, strengthen security configurations, and develop practical solutions that protect critical systems without unnecessarily disrupting business operations.

This position requires a proactive, technically strong security professional who can work independently, lead security initiatives, influence technical decisions, and serve as a trusted resource for enterprise security matters.

Responsibilities:

• Enterprise Security and Infrastructure Protection

+ Develop, implement, and maintain security controls that protect enterprise infrastructure, systems, networks, endpoints, and cloud environments.

+ Assess infrastructure configurations and identify security weaknesses, misconfigurations, and opportunities to reduce the organization's attack surface.

+ Establish and promote secure configuration standards, system hardening practices, and infrastructure security baselines.

+ Evaluate technology designs and infrastructure changes to ensure appropriate security controls are implemented.

+ Provide technical guidance on security best practices, infrastructure protection, and risk mitigation.

• Vulnerability and Risk Management

+ Manage and coordinate vulnerability identification, assessment, prioritization, remediation, and validation across the enterprise.

+ Analyze vulnerability scan results and prioritize findings based on severity, exploitability, asset criticality, exposure, and business impact.

+ Work with system administrators, network engineers, and cloud teams to drive timely remediation.

+ Track remediation activities, document exceptions, and communicate outstanding risks to appropriate stakeholders.

+ Identify recurring security issues and recommend sustainable corrective actions.

+ Provide reporting on vulnerability trends, remediation performance, and overall infrastructure risk.

• Security Operations and Incident Response

+ Investigate security alerts and suspicious activity involving enterprise systems, endpoints, identities, networks, and cloud resources.

+ Collaborate with security operations teams to investigate, contain, remediate, and document security incidents.

+ Support the use and continuous improvement of SIEM, EDR/XDR, logging, and threat detection capabilities.

+ Analyze security events, authentication anomalies, malware detections, unauthorized changes, and indicators of compromise.

+ Assist with incident response planning, root-cause analysis, recovery activities, and post-incident improvements.

+ Identify opportunities to improve detection coverage, response procedures, and security monitoring across infrastructure environments.

+ Coordinate technical remediation efforts with infrastructure and application support teams following security incidents.

• Network, Endpoint, and Systems Security

+ Support endpoint and server protection through EDR/XDR, antivirus, device compliance, and security configuration management.

+ Identify unnecessary services, exposed ports, insecure protocols, and configuration issues that introduce risk.

+ Promote secure administration practices and protection of critical infrastructure assets.

+ Collaborate with technical teams to improve resilience, system integrity, and security visibility.

• Security Governance, Compliance, and Risk Reduction

+ Support security assessments, internal audits, compliance reviews, and technical control evaluations.

+ Apply recognized security frameworks and practices, including NIST Cybersecurity Framework, CIS Controls, and ISO 27001, as applicable.

+ Maintain security standards, technical procedures, risk documentation, remediation records, and exception approvals.

+ Provide technical evidence and support for internal and external audits.

+ Assist in evaluating security risks associated with new technologies, vendors, infrastructure changes, and business initiatives.

+ Communicate technical risks and recommended corrective actions in a clear, actionable manner.

+ Contribute to continuous improvement of enterprise security policies, standards, and operating procedures.

• Technical Leadership and Collaboration

+ Serve as a senior technical resource for infrastructure security and enterprise cybersecurity matters.

+ Lead or coordinate security remediation efforts and infrastructure security improvement initiatives.

+ Build strong working relationships with IT operations, networking, cloud engineering, application support, and business stakeholders.

+ Provide guidance to technical teams on security requirements, implementation approaches, and remediation strategies.

+ Communicate priorities, risks, and recommendations to technical and nontechnical audiences.

+ Develop and maintain technical documentation, procedures, and knowledge-sharing materials.

+ Promote a security-conscious culture and help integrate security into everyday IT operations.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
• 5–8 years of experience in IT infrastructure, information security, cybersecurity engineering, systems administration, network engineering, or a related technical discipline.
• Strong understanding of enterprise infrastructure, including Windows and Linux servers, Active Directory, networking, virtualization, and hybrid cloud environments.
• Demonstrated experience implementing or supporting enterprise security controls.
• Experience with vulnerability management, security remediation, patch management, and infrastructure hardening.
• Working knowledge of network security, endpoint protection, identity security, authentication, and access management.
• Familiarity with security monitoring, incident response, logging, and security investigation processes.
• Understanding of security risk management, technical control assessments, and security best practices.
• Ability to collaborate with infrastructure teams to implement security improvements.
• Strong analytical, troubleshooting, documentation, communication, and problem-solving skills.
• Ability to manage multiple priorities and drive technical issues through resolution.

Preferred Qualifications

• Familiarity with security platforms such as Splunk, Tenable, EDR, NAC, DLP or comparable technologies.
• Experience supporting enterprise security initiatives, technical risk assessments, audits, and compliance programs.
• Knowledge of incident response, threat detection, threat hunting, and forensic investigation principles.
• Experience with security frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, or ISO 27001.
• Relevant certifications such as CISSP, CISA, Security+, CySA+, or other Infrastructure and Security related certification.
• Language: Korean Preferred (Optional).

Skills

• Enterprise infrastructure and security expertise.
• Strong technical troubleshooting and analytical skills.
• Risk-based prioritization and sound security judgment.
• Ability to translate security requirements into practical technical solutions.
• Ownership and accountability for remediation outcomes.
• Cross-functional communication and collaboration.
• Technical leadership and independent problem-solving.
• Commitment to continuous improvement and professional development.

Benefits

Overview

• 100% employer-paid Medical, Dental, and Vision premiums for you and your family
• 100% employer-paid disability and life insurance
• Generous Paid Time Off / Holidays
• Opportunity to grow in a diverse work environment with a global company
• 401k Retirement savings and planning with a generous company match

LGESMI is an Equal Opportunity employer that values the diversity of its workforce. EEO