Information Security Engineer

Seven Corners, Inc.; Carmel (IN); On-site; USD 90,000 - 120,000; Full time

Job summary

Seven Corners, Inc. in Carmel, Indiana, is looking for an Information Security Engineer to safeguard its information assets across on-prem, cloud, and SaaS.

You will implement and monitor security controls, collaborate with IT and business stakeholders, and help advance the ISMS. The ideal candidate has 3–5 years in security engineering, hands-on experience with Defender/Sentinel, IAM, vulnerability management, and incident response, plus knowledge of ISO 27001, HIPAA and PCI DSS.

Qualifications

• Bachelor’s degree in Information Technology with a focus on Information Security, or equivalent experience.
• 3-5 years of security engineering experience is preferred.
• Experience with Microsoft security technologies, including Defender, Sentinel, Entra ID, AD, Intune, Group Policy, Purview, and other Microsoft 365 security services.
• Proficiency administering enterprise security tools and platforms.
• Experience with vulnerability management, threat detection, incident response, and security monitoring.
• Working knowledge of ISO 27001, NIST CSF, CIS Controls, HIPAA and PCI DSS compliance frameworks.
• Experience supporting security audits, risk assessments, policy development, and compliance initiatives.
• Knowledge of cloud security concepts across Microsoft Azure and SaaS platforms.
• Strong problem solving and communication skills.

Responsibilities

• Protect Seven Corners' information assets by implementing, monitoring, and improving security controls.
• Identify, assess, and mitigate cybersecurity risks across on-premises, cloud, and SaaS environments.
• Administer and optimize security technologies, including SIEM, EDR, MFA, Conditional Access, IAM, and DLP.
• Investigate security incidents, coordinate remediation efforts, and support security awareness.
• Maintain ISMS, support audits, risk assessments, and ongoing compliance efforts.

Skills

Security controls

SIEM

EDR

MFA

Identity management

Cloud security

Threat detection

Incident response

Vulnerability management

ISMS

Education

InfoSec degree

Tools

Microsoft Defender

Microsoft Sentinel

Entra ID

Active Directory

Intune

Group Policy

Purview

MS 365 security

Job description

Description

About Us:

We were founded in 1993 on the simple belief that we can save the world from our competition by solving the insurance industry’s most challenging problems with innovative solutions and extraordinary service. We have proven it.

As one of the leading international travel insurance and specialty benefit management companies in the world, we service over 800,000 customers each year including international travelers, US government agencies, corporations, foreign governments, and insurance companies.

With a diverse and growing global workforce of the best and brightest talent, Seven Corners is a fast-paced, innovative company with no plans to slow down soon.

Our values drive each decision we make and each action we take. They are our guide to how we treat each other and our customers. These beliefs are the heart of the company culture and define what it means to work at Seven Corners.

Our Culture

Our culture is what makes us “us” it is the unique vibe you feel when you walk through our doors, the passion we bring to creating innovative solutions and the extra mile we go to put our customers first. It is a way of feeling and behaving toward each other and our customers. It is the values we hold to be true. It is in every decision we make and every action we take.

Our values we hold to be true. It is the values we hold to be true. It is in every decision we make and every action we take.

Our Values

Customers come first

We innovate

We do the right thing

We own the solution

We are precise

What you would do here

The Information Security Engineer is an integral member of the Infrastructure and Operations team and the broader Information Technology organization. This role is responsible for protecting Seven Corners' information assets, systems, networks, and data by implementing, monitoring, and continuously improving security controls, processes, and technologies.

The Information Security Engineer plays a critical role in identifying, assessing, and mitigating cybersecurity risks across on-premises, cloud, and SaaS environments. Working closely with Infrastructure, Operations, Application Development, Compliance, and business stakeholders, this position helps develop and implement security best practices that support the organization's security, regulatory, and business objectives.

This role is responsible for the administration, monitoring, and improvement of security technologies, including endpoint protection, SIEM, identity and access management, vulnerability management, email security, web application firewalls, intrusion detection and prevention systems, cloud security platforms, and related security tools.

The Information Security Engineer will investigate security incidents, conduct threat and vulnerability analysis, coordinate remediation efforts, and support security awareness and governance initiatives. The role will also participate in maintaining and improving the organization's Information Security Management System (ISMS), supporting internal and external audits, risk assessments, security policies, and ongoing compliance efforts aligned with ISO 27001 and other applicable regulatory and security frameworks (e.g., HIPAA, PCI DSS).

A strong understanding of cloud infrastructure, identity management, security architecture, and modern cybersecurity practices is required. Deep knowledge of network protocols, application security, threat detection, incident response, and endpoint security is highly desirable.

What you already know and have done

• Design, implement, and maintain security controls across identity, endpoint, network, cloud, and infrastructure environments
• Administer and optimize security technologies, including SIEM, EDR, MFA, Conditional Access, Identity and Access Management, and Data Loss Prevention
• Monitor the organization's security posture and proactively identify, assess, and remediate vulnerabilities and security risks
• Investigate, contain, and support the resolution of security incidents and other cybersecurity events
• Evaluate emerging threats, vulnerabilities, and technologies, and recommend appropriate mitigation strategies
• Participate in security architecture reviews and provide security guidance for projects, system implementations, and technology initiatives
• Develop, maintain, and enforce technical security standards, procedures, and best practices
• Automate security monitoring, reporting, and operational processes to improve efficiency and effectiveness
• Support the organization's Information Security Management System (ISMS), including risk assessments, security policies, compliance initiatives, and audit activities
• Evaluate organizational compliance with applicable regulatory frameworks through annual gap assessments and remediation planning
• Conduct third party vendor security risk reviews
• Create and maintain security documentation, standards, procedures, and supporting compliance evidence
• Partner with internal teams, vendors, and third-party security consultants to implement and improve security capabilities
• Participate in change management processes to ensure security requirements are appropriately reviewed and addressed

Requirements

Ideally you have

• Bachelor’s degree in Information Technology with a focus on Information Security, or a closely related field, or equivalent experience required
• 3-5 years of security engineering experience is preferred
• Experience with Microsoft security technologies, including Microsoft Defender, Microsoft Sentinel, Entra ID, Active Directory, Intune, Group Policy, Purview, and other Microsoft 365 security services
• Proficiency administering enterprise security tools and platforms
• Experience with vulnerability management, threat detection, incident response, and security monitoring
• Working knowledge of ISO 27001, NIST Cybersecurity Framework (CSF), CIS Controls, along with HIPAA and PCI DSS compliance frameworks
• Experience supporting security audits, risk assessments, policy development, and compliance initiatives
• Knowledge of cloud security concepts across Microsoft Azure and SaaS platforms
• Strong problem solving and communication skills required

Seven Corners hires culture fit over technical skills and experience. If you have the aptitude and attitude, we can help you grow your career through training, mentoring, increasing responsibility, and being around other rock star employees.

Seven Corners, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, age, status as a protected veteran, among other things, or status as a qualified individual with disability.