SummaryWe are seeking a hands-on Information Security Engineer to design, implement, and operate enterprise security controls across on-premises and cloud environments. This role is responsible for protecting endpoints, identities, networks, and data while supporting regulatory compliance and audit readiness. The ideal candidate brings strong operational experience with modern security tools and can balance day-to-day security operations with continuous improvement of the security program.
Responsibilities- Design, implement, andmaintainsecurity controls acrossendpoint, email, network, and cloud environments
- Administer andoptimizeEDR/XDR platforms (e.g., CrowdStrike) for threat detection and response
- Manage and tune email security platforms (e.g., Proofpoint) including phishing protection and DLP controls
- Operate,monitor, and continuously improve SIEM (e.g., Sumo Logic) for detection, alerting, and log analysis
- Configure and manage enterprisefirewalltechnologies (e.g., Cisco, Fortinet, Meraki)
- Support incident detection, investigation, and response activities in coordination with internal and MSSP partners
- Administer Microsoft security stack including Entra ID, M365 Defender, Conditional Access, and MFA
- Implement and enforce least-privilege access and identity protection controls
- Monitor identity-related threats and support response actions
- Secure Azure and/or AWS environments across IaaS, PaaS, and SaaS services
- Implement baseline configurations and cloud security controls aligned to best practices
- Monitor cloud workloads and integrate logs into SIEM for centralized visibility
- Support secure architecture design, including identity, network segmentation, and data protection
- Support regulatory frameworks including SOC 2, HIPAA, ISO 27001, and HITRUST
- Assist with internal and external audits, including evidence collection and remediation tracking
- Maintain and improve security policies, standards, and procedures
- Partner with cross-functional teams to ensure control effectiveness and audit readiness
QualificationsRequired
- 3-7 years of experience in information security, security engineering, or security operations
- EDR (CrowdStrike preferred)
- Email security platforms (Proofpoint preferred)
- SIEM platforms (Sumo Logic or similar)
- Strong understanding of network security and firewall technologies
- Experience with Microsoft security stack (Entra ID, Defender, Conditional Access, MFA)
- Experience securing Azure and/or AWS environments
- Solid understanding of security principles:
- Identity & access management
- Network segmentation
- Threat detection and response
- Logging and monitoring
Preferred
- Experience supporting SOC 2, HIPAA, HITRUST, or ISO 27001 audits
- Experience working with MDR/MSSP providers
- Familiarity with vulnerability management and remediation processes
- Relevant certifications (one or more preferred): CISSP, CCSP, Security+, AZ-500, AWS Security
