1-20- Security Engineer

Focused HR Solutions; Phoenix (AZ); Hybrid; USD 85,000 - 110,000; Full time

Job summary

A leading HR solutions provider is seeking a Security Engineer to manage security deliverables for the STARS project. This hybrid role involves ensuring compliance with state and federal security requirements while collaborating with technical teams. The ideal candidate will have a Bachelor's degree in Computer Science, at least 4 years of experience in security engineering, and relevant certifications. This position offers a competitive salary and the opportunity for professional growth in a vital role protecting organizational data.

Qualifications

• 4+ years of experience in computer information systems, specializing in security engineering.
• Security or risk certifications such as CISA, CISSP, or CIPP are a plus.

Responsibilities

• Focus on security deliverables for the STARS project.
• Support planning, design, engineering, upgrading, and monitoring of security protocols.
• Manage and organize the Plan of Action and Milestones for STARS.
• Perform system security assessments as required.
• Collaborate with internal and external technical teams.
• Review security policies and recommend changes based on trends.

Skills

Ability to collaborate and communicate

Problem-solving skills

Emerging technologies understanding

Proficient in security software

Experience with DevSecOps

Excellent verbal and written communication

Organized with attention to detail

Education

Bachelor's degree in Computer Science

M.B.A. in Information Systems

Tools

AWS

Azure

Job description

This job is hybrid and this will be a mix of remote and on site in Phoenix AZ.

Our direct client has an opening for a Security Engineer 1323.

Please send us your rate and resume.

This position is up to 2 years with the option of extension. The client is in Phoenix, AZ.

Work Location Address 1600 W Monroe St, Phoenix, AZ, 85007

Tentative Shift Start Time 8:00 AM Tentative Shift End Time 5:00 PM

Estimated Regular Hours/Week 40.00

Position Description

• This position will focus on security deliverables for the STARS project. If this position is not filled, ADOR InfoSec will be behind in operations, compliance, and will not be able to support all non-STARS related projects.
• The STARS Information Security Engineer will support the planning, design, engineering, upgrading, and monitoring of security protocols and systems for the protection of the organization's computer applications, infrastructure, networks and data.
• Perform system security assessments as required per state and federal law.
• Understand State and Federal security requirements for the project scope, preferably with prior experience with control frameworks (e.g., NIST, HITRUST, COBIT, COSO, and ISO) to drive IT privacy and regulatory compliance.
• Manage and organize the Plan of Action and Milestones for STARS. Create, monitor, and update security findings and associated metrics for STARS.
• Assess, engineer, and recommend solutions for security and technical teams on STARS.
• Collaborates and partners with internal and external technical teams.
• Performs risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures.
• Collaborates with analysts, engineers, and architects to improve security team processes using AMS principles. Collaborates with users to discuss computer data access needs, to identify security threats and violations, and to identify and recommend needed programming or process changes.
• Reviews project documentation and attend project meetings to ensure continuity and support of design and operations. Safeguards system security and improves overall server and network efficiency by training users and promoting security awareness.
• Develops and implements plans to safeguard digital data from accidental or unauthorized modification, destruction, or disclosure; adheres to emergency data processing needs.
• Reviews violations of security procedures; provides training to ensure violations do not recur.
• Reviews security policies, standards, procedures and recommends changes based on current trends and needs.
• Identify opportunities to automate various privacy and data protection compliance activities to reduce the overall cost of compliance.
• Performs other related duties as assigned.
• Skills Required Ability to collaborate, coordinate, and effectively communicate which is essential to drive work without direct authority.
• Technically proficient, with an understanding of emerging technologies and security engineering frameworks and practices.
• Demonstrated problem-solving and analytical skills.
• Proficient, or able to gain rapid proficiency with a broad array of security software applications and tools.
• Understanding and experience with computer-related security systems including firewalls, encryption, password protection, authentication and authorization, preferably with modern protocols and frameworks.
• Experience with DevSecOps, preferably in public cloud AWS and Azure environments.
• Excellent verbal and written communication skills.
• Organized with attention to detail. Security or risk certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional) and/or CIPP (Certified Information Privacy Professional) certifications are a plus.
• Experience working with products in the following categories Enterprise password and key vaults Vulnerability scanning and management SIEM PKI Open Source Vulnerability detection and remediation Continuous, automated security validation in software development CI/CD pipelines.

Skills Preferred

• Experience Required At least four years of experience in computer information systems with specialization in security engineering preferred.
• Experience Preferred.
• Education Required Bachelor's degree in Computer Science, Programming, or a related field required; M.B.A. in Information Systems preferred.