CyberSecurity Engineer

At Dexter, we manufacture and distribute axles, accessories, and towing components primarily serving the commercial trailer, RV, marine, agriculture, and manufactured housing markets. We’re building products and systems that are rooted in a culture of safety, collaboration, and innovation.

Headquartered in Elkhart, Indiana, Dexter has manufacturing and distribution locations throughout the U.S. and Canada. Employing state-of-the-art robotics, precision welding equipment, and automated machining processes, Dexter has achieved over 65 years of success through a commitment to the principles of superior quality, continuous improvement, and unparalleled customer service.

For more information about our company, access Dexter's web site at www.dextergroup.com.

The Cybersecurity Engineer performs two core functions for the enterprise. The first is the day-to-day operations of the in-place security solutions while the second is the identification, investigation, and resolution of security breaches detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines, and procedures as well as conducting vulnerability audits and assessments. The IT Security Engineer is expected to be fully aware of the enterprise’s security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals.

More specifically, this position will be responsible for activities including but not limited to the following:

Acquisition & Deployment 10%

· Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.

· Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Security Manager, where appropriate.

· Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.

Operational Management 30%

· Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).

· Maintain operational configurations of all in-place security solutions as per the established baselines.

· Monitor all in-place security solutions for efficient and appropriate operations.

· Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution.

· Participate in investigations into problematic activity.

· Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.

· Ensuring that DexKo is up-to-date with the latest security standards, patches, network protocols, and products

· Support cybersecurity review of vendors, integrations, SaaS platforms, and managed service providers.

· Ability to project manage the deployment of complex security technologies

· Research security architecture, security technologies, and security solutions

· Coordinate with infrastructure, service desk, legal, privacy, HR, and business teams during security incidents.

· Identify areas where controls are lacking or inadequate

· Participate in incident response activities including triage, containment, eradication, recovery, root-cause analysis, and post-incident improvement.

Cybersecurity AI and Emerging Technology 60%

· Design, build, and maintain security automation workflows to improve detection, response, vulnerability management, user access reviews, and compliance evidence collection.

· Develop scripts, playbooks, integrations and automated workflows using tools such as PowerShell, Python, APIs, SOAR platforms, SIEM automation, Microsoft Graph, and ITSM platforms.

· Automate repetitive security operations tasks including alert enrichment, case creation, containment actions, reporting, control validation, and exception tracking

· Maintain documentation, version control, testing and change management for security automation workflows.

· Measure automation effectiveness through reduced response time, reduced manual effort, improved control coverage, and fewer recurring issues.

· Evaluate, implement and govern cybersecurity use cases for AI, machine learning, and automation technologies.

· Support security monitoring of AI platforms, including user activity, data loss prevention, prompt/data exposure risk, and unsanctioned AI usage.

· Use AI-enabled security tools to improve threat detection, incident triage, vulnerability prioritization, security awareness, and reporting.

· Partner with Legal, Privacy, Compliance, and IT teams to ensure AI security controls align with data protection, acceptable use, regulatory, and business requirements.

· Penetration testing and offensive security.

Education & Experience:

College diploma or university degree in Computer Science and/or five years equivalent work experience. Preferred degree program in Information Technology, Computer Science, or Engineering

5+ Years in IT Security or IT Infrastructure Support

Proven analytical and problem-solving capabilities

At least one certification in security, preferably CISSP or CISM

Proactive, self-starter motivated by new challenges

Qualified Candidates will have Extensive experience with:

• Understand cyber security frameworks (e.g. ISO 27001/27002, NIST 800-53, NIST CSF etc.)
• Antivirus and EDR solutions
• Patching and IT Asset Management systems (ManageEngine Preferred)
• SIEM and correlation Management Tools
• Vulnerability Management Solutions and Penetration Testing
• Security automation using PowerShell, Python, APIs, Microsoft Graph, SOAR, SIEM automation, or ITSM workflows.
• Microsoft security technologies such as Microsoft 365, Entra ID, Defender, Purview, Conditional Access, or equivalent platforms.
• Security monitoring and governance for AI platforms and emerging technologies.
• Detection engineering, alert tuning, incident triage, and threat-informed defense.

And a Working Technical Knowledge of:

• Security Awareness Education Platforms
• NIST and GDPR Frameworks
• Security Auditing Techniques
• AI-related cybersecurity risks, including data leakage, prompt exposure, insecure generated scripts, and unauthorized AI tool usage.
• Identity security, privileged access, MFA, SSO, and conditional access.
• MITRE ATT&CK and threat-informed detection engineering.

With a Strong Understanding of:

• IP, TCP/IP, and other network administration protocols
• Incident Response Procedures and Policies

Up to 20% travel required, International and local travel required.

We care for our people. Here are some of our great, comprehensive Benefits:

• Dexter offers a competitive wage
• Full benefits package including Health, Dental, Vision, Life, STD, LTD, FSA, HSA
• 3% profit sharing in our Safe Harbor program
• 401(k) Plan with company contributions
• Opportunities for internal career development and growth

Apply now to join an industry leader and make a difference in what we do for the customers we serve!

Dexter is committed to attracting, developing, and retaining a highly qualified, dedicated workforce. We hire and promote individuals based on their qualifications, performance, and abilities.

It is the policy of the Company to provide equal opportunity to all qualified individuals without discrimination on the basis of race, ethnicity, national origin, gender, age, sexual orientation, disability, religion, veteran status, citizenship status or any other protected characteristic as outlined by applicable U.S. and Canada equal rights legislation protected by federal, state, province or local law.