Requisition ID: 19482

Remote Work Available: Yes

Job Title: Information Security Engineer
Department: Information Security
Location: Remote (unless near an office)
Reports to: Information Security Director or Information Security Manager
FLSA Status: Exempt Regular Full-Time

Role Summary:
The Information Security Engineer is responsible for managing the development of information security tools and ensuring technology initiatives are implemented to meet Trulieve security standards and framework.
This person will be accountable for securing company information and infrastructure by utilizing their experience to assess our systems and identify, develop, and implement additional tools as our needs evolve.
The role of the Information Security Engineer is to be the business customer-facing and to play an active role in transforming Trulieve's infrastructure security through designing and implementing security technologies across the Trulieve network.

Key Duties and Responsibilities:
• Can lead projects and must work closely with other engineers, architects, and vendors to design secure, highly available production environments.
• The engineer must be able to manage very dynamic environments and adapt quickly to technological changes at a moment's notice to provide quick detailed solutions with little or no supervision.
• Must be experienced and results-oriented and demonstrate practical problem-solving and communication skills.
• Must be able to manage very dynamic environments and adapt quickly to technological changes at a moment's notice to provide quick detailed solutions with little or no supervision.
• Document the current state, perform gap analysis and create a target state for enterprise-wide network security.
• Demonstrate hands-on experience administering, tuning, and operationalizing Microsoft Defender (e.g., Defender for Cloud, and Defender for Identity) to strengthen detection and response capabilities.
• Have working knowledge of CrowdStrike Falcon, including endpoint deployment, policy management, alert triage, and incident response support.
• Monitor network traffic for suspicious activity, detecting and responding to security incidents, and performing incident analysis.
• Work with IT and Security leadership and cross-functional teams to develop strategies and plans to enforce security requirements and address identified risks.
• Must have strong organizational skills and problem-solving expertise while working with current and emerging technologies.
• Must practice a disciplined and systematic approach to all tasks.
• The Engineer often serves as a subject matter expert for colleagues, and experience with multiple technologies, compliance requirements, and risk analysis methodologies is crucial.
• Establish and manage business relationships.
• Implement organizational policies and creates Security policies.
• Incorporate the company's strategic goals with ongoing initiatives.
• Use their experience to improve processes and mentor junior team members.

Skills and Qualifications:
• Bachelor's Degree - Computer Science, Engineering, Information Technology, or related discipline.
• Have 4+ years of experience in Information Security Experience implementing security best practices, architecture, and security management.
• One Security certification is preferred (GSEC, GISF, GPEN, GCIH, GCIA, CISSP, or equivalent) or obtained within 12 months of hire.
• Have experience leading the installation, configuration, and deployment of security tools, including the project manager role.
• Self-motivated and capable of working effectively with some supervision.
• Can build professional relationships and have excellent communication skills.
• Have a solid customer-focused mindset.

Work Schedule:
40+ hours weekly with flexible hours depending on department needs.

Salary will be commensurate with experience. A comprehensive benefits package including paid time off is offered with this position.