Information Security Engineer

Strategy is seeking an Information Security Engineer to support the detection, monitoring, and tracking of security vulnerabilities at various levels. The ideal candidate will have expertise in cloud operations, IAM policies, and security orchestration, as well as a solid understanding of compliance requirements and standards. The role involves working closely with network and compliance teams to implement and maintain security controls.

Requirements

• Support the detection, monitoring, and tracking of security vulnerabilities at various levels
• Support AWS, Azure, and Google cloud operations in securing public cloud environments
• Configure and troubleshoot IAM policies, Security Groups, Service Control Policies, Role based access control, and Managed Service Identities
• Tune-in and configure SIEM performance and events data quality to maximize log correlation efficiency
• Work closely with the network team to implement and maintain network access control technologies
• Configure Security Orchestration, Automation, and Response (SOAR) tools, scripts, events, and playbooks
• Expertise in shell scripting and other programming languages, such as Python and Power Shell
• Proficiency in understanding and using regular expressions (regex)
• Solid understanding of REST/SOAP/WSDL/XML (Web Services), HTTP Request Methods
• Work closely with the compliance team to identify, document, and implement various security controls related to NIST, FedRAMP, HiTRUST, and ISO 27001
• Guide the network and operations teams in implementing security best practices
• Work with network, and systems engineering teams to promote automation, automated monitoring, and administration functionality
• Implement, and support security solutions including but not limited to Intrusion Detection, Log Management, Data Loss Prevention, Vulnerability Management, Web Content Filtering, and Configuration Management
• Support the efforts to develop operational best practice procedural documentation for operations staff
• Assist in the development and documentation of various systems, policies, procedures, and customer deliverables
• Research new products and make appropriate recommendations
• Develop and design project plans, tasks, and timelines, and then provide verbal and written status reports as directed
• Conduct ongoing security assessments, document, and track findings and remediation activities
• Provide on-call support as needed

Benefits

• Health insurance
• Paid time off
• 401(k) matching