Lead Security Engineer

The posting, as Fictiv wrote it

About MISUMI Americas

MISUMI Americas, a division of MISUMI Group, is a leading provider of standard, configurable, and custom manufacturing solutions. By integrating a vast catalog of components with a world-class digital manufacturing platform, MISUMI Americas empowers engineers and procurement teams to accelerate innovation across the entire product lifecycle. With operations in the San Francisco Bay Area and Chicago, the company serves as a vital partner for the most innovative companies in the Americas.

Lead Security Engineer

Location: Oakland, CA; Salary Range: $180,240 - $216,120; Citizenship Requirement: Must be a U.S. Citizen or Green Card holder

This is a hands-on security engineering job that covers the full range of a lead security engineer role across all of MISUMI Americas. You'll be the person who does a lot of the security day-to-day work: securing our infrastructure, running access audits, setting up controls, reviewing our systems and code, and helping investigate incidents. You'll also have a real say in the policies and priorities that shape how we handle security across the company.

A good portion of your time will go to keeping our infrastructure secure. That spans both physical networking and cloud, and it means staying on top of IAM, security groups, permission policies, and application permissions so access to our systems is tight and scoped the way it should be.

Threat detection and incident response at MISUMI Americas is handled by a group across multiple departments, and you'll be part of it. When something comes up, you'll help investigate, both hands-on and by helping coordinate the response. You will also be the escalation point for routine security issues that end up being more than expected or the existing teams can handle on their own.

As Lead Security Engineer, you'll make security decisions and help us figure out which security projects matter most across MISUMI Americas' global operations. You'll be doing the audits, checks, and reviews, and you'll help shape our security policies and standards alongside security leadership.

A big and growing part of the job is how we handle AI. You'll manage the way our AI tools are set up and help determine what's safe to turn on and what needs to be disabled. You'll also work closely with Information Security to contribute and maintain evidence for J-SOX, NIST 800-171, CMMC 2, and SOC 2 across a global business.

Areas of Responsibility

Security Decisions & Prioritization

• Be the hands-on security lead across IT and engineering, making everyday security calls and acting as the main point of execution for security work
• Look at security risk across the environment and help decide which security projects and initiatives to tackle first across MISUMI Americas' global operations
• Help write, shape, and enforce our security policies, standards, and governance alongside security leadership

Incident Response & Escalation

• Serve as part of our threat detectio

[…]
r similar), and comfort designing roles and RBAC in platforms like Microsoft Entra ID, Okta, or AWS IAM

• Familiarity with security monitoring and detection tools, enough to support investigations effectively
• Real experience running user access audits, access reviews, and compliance checks
• Experience supporting audit and compliance programs like SOC 2, NIST 800-53/800-171, CMMC 2.0, and J-SOX, including gathering evidence and validating controls
• Solid application security skills: automation tooling, reading code for security issues, and secure integration practices
• The confidence to make security decisions on your own and help sort out competing priorities
• A working understanding of AI and LLM security, including administering AI tools, weighing new capabilities for risk, and knowing how integrations like MCP servers fit in
• A habit of turning manual security work into repeatable processes and automation
• Clear communication and the ability to work across a spread-out, multi-site, global organization

Bonus

• Certifications like CISSP, CISM, Security+, or GIAC (GSEC, GCIH, and the like)
• Firsthand experience preparing for and going through a CMMC 2.0 assessment
• Experience with audit and controls at a global, Japanese-owned company (J-SOX exposure)
• Scripting and automation skills, for example, Bash, Python or PowerShell

We’re actively seeking teammates who

• Bring diverse perspectives and experience to our culture and company.
• Excel at being part of a strong, empathetic team.
• Thrive in an environment emphasizing respect, honesty, collaboration, and growth.
• Have an ‘always learning’ mindset that celebrates learning, not just wins.
• Help us continue to build a world-class organization that values the contributions of all of our teammates

We encourage applications from members of underrepresented groups, including but not limited to women, members of the LGBTQ community, people of color, people with disabilities, and veterans.