What you will be doing:
As a Penske Systems Engineer – Cyber Security, you will provide hands-on security engineering expertise across cloud and enterprise environments. A primary focus of this role will be cloud security, including evaluating cloud architectures, implementing security controls, identifying and reducing risk, and partnering with infrastructure, application, and cloud teams to securely enable new capabilities.
You will bring strong hands-on cloud security expertise while applying security principles across cloud environments. Over time, you will also contribute to the broader responsibilities of the Cyber Security Engineering team, including security architecture, vulnerability management, identity and access management, network security, security monitoring, and other security technologies and initiatives.
Penske Responsibilities:
-
Design, implement, and maintain security controls across cloud environments.
-
Perform cloud security architecture reviews and provide security guidance for new and existing cloud solutions.
-
Assess cloud environments for security risks, misconfigurations, vulnerabilities, excessive permissions, and opportunities to improve security posture.
-
Support identity and access management, least privilege, logging and monitoring, network security, data protection, vulnerability management, and configuration management within cloud environments.
-
Partner with cloud, infrastructure, application, and development teams to integrate security into the design and implementation of cloud solutions.
-
Support automation and Infrastructure as Code (IaC) approaches for implementing and maintaining cloud security controls.
-
Evaluate and recommend cloud security technologies and improvements based on evolving threats and industry practices.
-
Contribute to broader cybersecurity engineering responsibilities and technologies beyond cloud security as team priorities evolve.
-
Define, implement, and promote security policies, standards, and technical controls to protect company systems and information.
-
Provide security reviews and help define security architectures and models for new and existing systems.
-
Evaluate and recommend security technologies and improvements based on business requirements, risk, and effectiveness.
-
Implement and maintain security capabilities across network, endpoint, server, application, and other enterprise environments.
-
Support security monitoring, vulnerability management, access controls, logging, and threat detection capabilities.
-
Support compliance and audit activities, including access reviews and security control validation.
-
Collaborate with teams across IT to identify security requirements, resolve issues, and implement secure solutions.
-
Participate in multiple large-scale and cross-functional security initiatives and projects.
-
Mentor and provide technical guidance to other security team members and partners.
-
Develop, test, and maintain security procedures, documentation, and recovery or emergency measures.
Penske Qualifications:
Bachelor’s degree or equivalent experience required; advanced degrees or certifications preferred.
6+ years of cybersecurity engineering or closely related technical security experience.
Strong hands-on cloud security engineering experience.
Experience securing cloud environments across areas such as identity and access management, network security, logging and monitoring, vulnerability management, data protection, configuration management, and security architecture.
Experience evaluating cloud security posture and identifying and remediating security risks and misconfigurations.
Experience with Infrastructure as Code (IaC), automation, or DevSecOps practices preferred.
Experience with cloud-native security capabilities and/or CSPM/CNAPP technologies preferred.
Ability and willingness to work across broader cybersecurity technologies and disciplines beyond cloud security.
Strong collaboration, documentation, and communication skills.
Cybersecurity and/or cloud security certifications preferred (CISSP, CISM, CCSP, etc.).
Regular, predictable, full attendance is an essential function of the job
Willingness to travel as necessary, work the required schedule, work at the specific location required, complete Penske employment application, submit to a background investigation (to include past employment, education, and criminal history) and drug screening are required.
Skills Required
- Bachelor’s degree or equivalent experience
- 6 or more years of functional experience
- Advanced knowledge of firewall software and hardware, including Cisco ASA and Palo Alto
- Experience with proxy filtering, including Blue Coat Proxy
- Experience configuring and analyzing centralized logs, including Splunk
- Experience configuring and analyzing IDS/IPS systems
- Experience with SSO infrastructure, including CA SiteMinder, LDAP, and RSA Identity Management
- Experience with network vulnerability scanning, including Nessus or Tenable
- Experience with advanced user authentication structures, including Cisco ACS and RSA ACE servers
- OS hardening and security experience across IBM i, Linux, Mac, and Windows
- Application vulnerability scanning experience
- Networking, TCP/IP, and packet capture experience using tcpdump and Wireshark
- Experience with endpoint protection solutions, including CrowdStrike and McAfee
- Experience with encryption technology
- Knowledge of SOX and PCI requirements and auditing
- 1 to 2 years of project management experience, including mid-to-large-scale and concurrent projects
- CISSP, CISM, or another IT security certification
- Ability to work at least two days per week from the Penske office in Reading, Pennsylvania
- Willingness to travel as necessary and work the required schedule
- Regular, predictable, full attendance
- Successful background investigation and drug screening
- Ability to lift or move up to 25 pounds
Penske Logistics Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Penske Logistics and has not been reviewed or approved by Penske Logistics.
-
Retirement Support — Retirement options include a 401(k) and, in some driver roles, a 100% company‑funded pension that provides strong long‑term value. These retirement features are described as rare and valuable within certain assignments.
-
Leave & Time Off Breadth — Paid vacation, holidays, and sick leave are part of the standard package, with some roles offering PTO starting on day one. Time‑off provisions are consistently presented alongside core benefits.
-
Healthcare Strength — Medical, dental, vision, and hearing coverage are complemented by telemedicine, mental‑health support, and disability options. FSAs/HSAs and wellness resources contribute to broad healthcare coverage.
Penske Logistics Insights
What We Do
Penske Logistics is a Penske Transportation Solutions company. We provide supply chain management and logistics solutions to leading brands around the world. Penske Logistics delivers value through its design, planning and execution in transportation, warehousing, freight management, and dry-van truckload services. Penske offers customized supply chain and logistics solutions including: Dedicated Contract Carriage; Distribution Center Management; Freight Management; Freight Brokerage; Transportation Management Solutions (TMS); Lead Logistics Provider (LLP), Control Tower and 4PL Solutions. We serve a variety of industries including: automotive; food, beverage, grocery, wine and spirits; cold chain; convenience and drug stores; quick service restaurants (QSRs); retail; big box retailers; building and construction products; CPG; healthcare; industrial manufacturing; consumer appliances and consumer electronics; and many others.
