Attack surface isn't just a digital concept here - it's physical, too. Sherwin-Williams has been manufacturing and distributing paint and coatings since 1866, building a sprawling industrial footprint across more than 120 countries with over 64,000 employees. That scale means securing not just corporate IT and customer data, but operational technology on factory floors, distribution networks, and a massive retail presence. The threat model covers everything from intellectual property theft around proprietary coating formulations to supply chain compromise and the convergence of IT and OT systems in industrial manufacturing environments.
The cybersecurity team operates across domains that span far beyond typical enterprise defense. You're protecting R&D pipelines for architectural paints, industrial coatings, and specialized finishing solutions - products where formula data is high-value IP. You're securing global distribution logistics and point-of-sale infrastructure across thousands of retail locations. The attack surface is genuinely hybrid: cloud workloads, on-prem manufacturing control systems, and a retail stack that touches millions of transactions.
Working here means dealing with the security challenges of a 150+ year-old industrial company that now runs on modern infrastructure. The scope is industrial-grade: endpoint defense across a massive, geographically distributed workforce, OT security for coating production facilities, and the governance complexity that comes with operating in over 120 regulatory jurisdictions. It's not a startup problem set - it's the kind of environment where you operationalize security at scale across physical and digital systems that can't afford downtime.
