#LI-HybridOverviewThe Information Security Engineer implements, configures, and manages a broad portfolio of security technologiesacross on-premises and cloud environments and performs day-to-day security operations. The Engineer partners closely with Architects, Governance, Information Technology, Development, and other business areas to ensure the Order's security initiatives align with established security standards and regulatory requirements. The Engineer monitors network, cloud, and identity activity to detect intrusion attempts, identify trends, and investigate and respond to potential breaches and anomalies. The role also mentors and guides team members and drives improvements to processes, procedures, and system configurations.Core Responsibilities- Secures Azure, Microsoft 365, and on-premises systems by designing, implementing, and enforcing controls for workloads, identities, and data.
- Implements, integrates, and supports the organization's security tools and platforms (e.g., EDR, SIEM, firewalls, NAC, etc.).
- Leads complex security projects.
- Participates in comprehensive proofs of concept.
- Monitors environments for intrusions and identifies irregular system behavior and patterns.
- Maintains diagrams, procedures, and other operational documentation.
- Reviews existing tools, policies, and systems, and provides recommendations and guidance to strengthen overall security posture.
- Investigates security alerts and reported events, and performs incident response activities.
- Educates users regarding information security requirements, policies, and procedures.
- Assists cross-functional staff in identifying and implementing appropriate security safeguards.
Authorization to work in the United States is requiredSkills Qualifications- The candidate must have strong foundational knowledge of information security and practical experience in Security Services. Specific knowledge areas include:
- Strong background securing public cloud applications, data, and systems, as well as Microsoft 365. Azure experience is preferred (e.g., Entra ID and Conditional Access, Defender for Cloud, Microsoft Sentinel, Azure Policy); hands-on experience with any major cloud platform (e.g., AWS, GCP) is a significant plus.
- Experience working with security systems and technologies, including firewalls, WAF, MFA, CASB, Content Filtering, NAC, DDoS, EDR, DLP, SIEM, and IPS/IDS.
- Experience with security concepts and programs, including Zero Trust, IAM, PAM, vulnerability management, encryption, PKI, application & web security, code review, incident response, and awareness training.
- Scripting and automation experience (e.g., PowerShell, KQL, SOAR, and infrastructure as code such as Bicep or Terraform) is preferred.
- Sound Judgment - weighs security risk against business needs and prioritizes work accordingly.
- Intellectually Curious - thoughtful and inquisitive; readily shares knowledge so others learn and grow.
- Strong Communicator - explains technical concepts and risk clearly to non-technical stakeholders and leadership.
- Team Oriented - collaborates readily and celebrates the success of others on the team.
- Familiarity with frameworks such as NIST 800-53, CSF, ITIL, COBIT, ISO 2700x
- A Security-first mindset.
- Must be able to operate in a confidential manner.
Education- Bachelor's degree or equivalent experience
- 5+ years of relevant security engineering and operations experience, including hands-on experience securing cloud environments (Azure preferred)
- Certifications are not required but are a plus, including industry-recognized security certifications (e.g., CISSP, CISM, GSEC, SSCP) and Azure or other cloud security certifications.
CompensationThe wage range for this role takes into account a broad array of factors that are considered in making compensation decisions, including but not limited to: skill sets; experience and training; licensure and certifications; and other business and organizational needs. The range below applies as long as the work is performed in Connecticut; the Knights of Columbus reserves the right to adjust the wage range if the position is performed in another location. At the Knights of Columbus, it is not typical for an individual to be hired at or near the top of the range for their role, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $98,000 - $166,500.
Physical DemandsMust be able to remain in a stationary position for a majority of the workday.
KofC CaresOur mission is focused on family and faith, and we support our employees in seeking a balanced life.
Employee benefits include:
Time Away: 13 paid holidays per year in addition to vacation and paid sick leave, and flexible workweek schedules.
Professional Development: Certifications, designation, and tuition reimbursement.
Retirement Benefits: 401(k) retirement savings plan with matching company contributions, and cash balance retirement plans fully funded by the company.
Health and Wellness:
- Short-term disability and term life insurance fully paid for by the company;
- Up to 12 weeks of childbirth leave under STD policy.
- One week of fully paid parental leave for all new parents, including adoptive and foster parents.
- A variety of health insurance options, including premium-level family coverage and a pre-tax Health Savings Account with employer contributions. The Order's health plans do not cover abortion, sterilization, or contraception, and the Order has helped advocate for other employers who do not want to provide coverage.
- Long-term disability insurance;
- Dental insurance;
- Vision insurance;
- Health club membership reimbursement;
- Employee Assistance Program
