What you will be doing:  

As a Penske Systems Engineer – Cyber Security, you will provide hands-on security engineering expertise across cloud and enterprise environments. A primary focus of this role will be cloud security, including evaluating cloud architectures, implementing security controls, identifying and reducing risk, and partnering with infrastructure, application, and cloud teams to securely enable new capabilities. 

You will bring strong hands-on cloud security expertise while applying security principles across cloud environments. Over time, you will also contribute to the broader responsibilities of the Cyber Security Engineering team, including security architecture, vulnerability management, identity and access management, network security, security monitoring, and other security technologies and initiatives. 

Penske Responsibilities:  

• Design, implement, and maintain security controls across cloud environments. 

• Perform cloud security architecture reviews and provide security guidance for new and existing cloud solutions. 

• Assess cloud environments for security risks, misconfigurations, vulnerabilities, excessive permissions, and opportunities to improve security posture. 

• Support identity and access management, least privilege, logging and monitoring, network security, data protection, vulnerability management, and configuration management within cloud environments. 

• Partner with cloud, infrastructure, application, and development teams to integrate security into the design and implementation of cloud solutions. 

• Support automation and Infrastructure as Code (IaC) approaches for implementing and maintaining cloud security controls. 

• Evaluate and recommend cloud security technologies and improvements based on evolving threats and industry practices. 

• Contribute to broader cybersecurity engineering responsibilities and technologies beyond cloud security as team priorities evolve. 

• Define, implement, and promote security policies, standards, and technical controls to protect company systems and information.  

• Provide security reviews and help define security architectures and models for new and existing systems.  

• Evaluate and recommend security technologies and improvements based on business requirements, risk, and effectiveness.  

• Implement and maintain security capabilities across network, endpoint, server, application, and other enterprise environments.  

• Support security monitoring, vulnerability management, access controls, logging, and threat detection capabilities.  

• Support compliance and audit activities, including access reviews and security control validation.  

• Collaborate with teams across IT to identify security requirements, resolve issues, and implement secure solutions.  

• Participate in multiple large-scale and cross-functional security initiatives and projects.  

• Mentor and provide technical guidance to other security team members and partners.  

• Develop, test, and maintain security procedures, documentation, and recovery or emergency measures.