Information Security Engineer

Role Overview

We are seeking an operational Information Security Engineer to design, implement, and maintain our core cybersecurity infrastructure. In this role, you will take hands-on responsibility for evaluating system architectures, deploying security controls, and configuring network/cloud environments against emerging threats.

If you are a driven security practitioner eager to step into architectural design, apply security frameworks, and protect multi-cloud/on-prem environments, this role provides immediate ownership and high growth potential across our technical stack.

Key Responsibilities

• Architecture & Infrastructure Implementation: Partner with IT and DevOps teams to design, configure, and maintain secure network architectures, firewalls, IAM policies, and cloud infrastructure (AWS/Azure/GCP).
• Vulnerability & Threat Management: Conduct risk assessments, system audits, and vulnerability scans to identify architectural gaps and implement automated remediation paths.
• Security Control Integration: Deploy, monitor, and tune SIEM, Endpoint Detection & Response (EDR), Intrusion Prevention (IPS), and data loss prevention tools.
• Incident Response & Automation: Assist in responding to security alerts, conducting root-cause analysis, and writing scripts (Python, Bash, PowerShell) to automate security checks.
• Governance & Standards: Help enforce organizational security baselines, standard operating procedures, and compliance alignment (NIST, ISO 27001, SOC 2).

Qualifications

• Education: Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.
• Experience Level: 2–4 years of experience in system administration, network security, or security operations (SOC), with early exposure to security design or cloud infrastructure.
• Technical Skills: Hands-on experience with firewalls, identity management (Active Directory/Okta), cloud security configurations, and infrastructure-as-code principles.
• Certifications (Preferred): CompTIA Security+, CySA+, AWS Certified Security, or early-stage Security/Network certifications (e.g., CCNA Security, GSEC).
• Mindset: Strong technical curiosity, proactive problem-solving ability, and a structured approach to defensive engineering.