Information Security Engineer II

As an Information Security Engineer II at Netchex, youll own the design and implementation of security controls across our web applications and Azure cloud environment from DevSecOps and CI/CD security to identity management and endpoint protection while mentoring junior engineers along the way.

Key Responsibilities

• Independently design, implement, and tune security controls for web applications, such as the Web Application Firewall (WAF).
• Own and drive the integration and automation of security practices across the CI/CD pipeline (DevSecOps) - taking a high-level requirement, researching the right approach, recommending the technology, and delivering end to end with stakeholder check-ins.
• Architect and implement security solutions for the corporate environment, including identity management, endpoint security, and data loss prevention (DLP).
• Act as a subject matter expert on security for both product and corporate systems, providing guidance to other teams.
• Design and architect robust security solutions for both a multi-tenant SaaS platform and a corporate enterprise.
• Contribute to developing and implementing the organizations application and cloud security strategy.
• Mentor junior engineers and independently own complex, cross-functional security projects from requirement through delivery.
• Apply expertise in advanced threat modeling, penetration testing result analysis, and security architecture reviews.

What Were Looking For

• 3-5 years of experience in an Information Security Engineering role, with a focus on both application and enterprise security.
• Proven experience securing web applications and cloud environments, particularly Microsoft Azure.
• Strong experience with security automation, scripting (PowerShell, Python), and Infrastructure as Code (Bicep, Terraform).
• In-depth knowledge of web application firewalls (WAF), network security, identity and access management (IAM), and data protection.
• Familiarity with Agile methodologies and a strong understanding of DevSecOps principles.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.