Information Security Engineer

Wounded Warrior Project; Jacksonville (FL); On-site; USD 105,000 - 145,000; Full time

Benefits offered by this job

Hybrid work schedule

Medical coverage

Dental coverage

Vision coverage

Competitive pay

Job summary

Wounded Warrior Project is seeking an Information Security Engineer to design, implement, and maintain security controls across identities, cloud services, applications, and data. You’ll collaborate with business and tech teams to strengthen posture through IAM, data protection, and governance.

The role emphasizes security architecture, risk assessment, incident response, and mentorship of security staff, with a hybrid work model and a mission-driven team culture.

Qualifications

• Five years of information security experience.
• Three years designing or administering enterprise security controls.
• Experience with IAM, security architecture, data protection, cloud security, or related disciplines.
• Experience collaborating with stakeholders to implement security improvements.

Responsibilities

• Develop, implement, and maintain security strategies and architecture.
• Design and administer security technologies and controls.
• Serve as a security SME for the organization and vendors.
• Configure identity and access management controls and privilege governance.
• Support cloud and SaaS security reviews and risk assessments.
• Integrate security requirements into software development and procurement.
• Monitor SIEM platforms and lead remediation of findings.
• Conduct vulnerability scans and risk analyses; drive fixes.
• Evaluate emerging technologies and governance practices.

Skills

Identity management

Access controls

Permissions

Privileges

Encryption

Web security

Intrusion prevention

Data loss prevention

Cloud security

Application security

SIEM

Vulnerability assessments

Education

Bachelor's degree in computer science, information systems, or related field

Tools

Identity and access management tools

Cloud security platforms

Security monitoring tools

Job description

Great benefits. Competitive pay. We know these are some of the things people look for in a job. If you’re the kind of person who believes that honoring and empowering our nation’s veterans is more than just a cause — that it’s a calling — then we’re ready to meet you. When you join Wounded Warrior Project® (WWP), you’re committing to making a difference. We make a commitment to you, too – helping you to find that spark, ignite your passion to serve, and embark on a career with meaning and purpose. At WWP™, we recognize our mission cannot be accomplished without our talented teammates, which is why we’re proud to offer benefits such as:

• A flexible hybrid work schedule (three days in the office, two days’ work from home)
• Full medical, dental, and vision coverage for both teammates AND family members
• Competitive pay and performance incentives
• A fun, mission-focused, and collaborative team environment

The Wounded Warrior Project (WWP) Information Security Engineer serves as a subject matter expert responsible for designing, implementing, and maintaining security controls that protect WWP’s systems, identities, applications, cloud services, and information assets. This role partners with business and technology teams to advance cybersecurity capabilities across identity and access management, data protection, cloud security, application security, security operations, and emerging technology governance. The Information Security Engineer evaluates and implements security solutions, promotes security best practices, and helps strengthen WWP’s overall security posture.

DUTIES & RESPONSIBILITIES

• Develop, implement, and maintain security strategies, platforms, and overall security architecture.
• Design, implement, administer, and continuously improve enterprise security technologies and controls.
• Serve as a security subject matter expert for the organization and third-party vendors.
• Design and administer identity and access management controls, including authentication, authorization, access governance, and privileged access management processes.
• Support security architecture reviews and risk assessments for cloud platforms, software-as-a-service (SaaS) solutions, and third-party technologies.
• Partner with application owners and technology teams to integrate security requirements into software acquisition, development, and implementation processes.
• Configure and monitor security information and event management (SIEM) platforms.
• Perform vulnerability scans, risk analyses, and security assessments, and lead remediation efforts.
• Evaluate emerging technologies, including artificial intelligence and automation platforms, and help develop appropriate security controls and governance practices.
• Support information protection, data classification, data retention, and security governance initiatives.
• Define, measure, and report on security metrics and performance indicators.
• Provide technical guidance and mentorship to security analysts and other IT teammates.
• Conduct research and remain current on emerging security threats, trends, vulnerabilities, and best practices.
• Participate in incident response, threat investigations, and remediation activities while partnering with security operations personnel to improve detection and response capabilities.
• Evaluate new technologies and processes that enhance security capabilities and operational effectiveness.
• Design and maintain controls that support data protection, information governance, encryption, and secure data-handling practices.
• Analyze existing security controls and recommend improvements to strengthen WWP’s security posture.
• Participate in the evaluation, selection, and implementation of technology solutions.
• Prepare and maintain security documentation, including policies, procedures, standards, and training materials.
• Attend and actively participate in required training and/or meetings, including but not limited to New Teammate Orientation, WWP Cares, ASIST Suicide Prevention training, Leadership training, culture/team based training, or departmental huddles.
• Other related duties as assigned.

KNOWLEDGE, SKILLS, & ABILITIES

• Strong knowledge of identity management, access controls, permissions, privileges, encryption, web security, intrusion prevention, and data loss prevention technologies.
• Knowledge of identity and access management principles, cloud security concepts and architectures, application security practices, and security governance, risk management, and compliance concepts.
• Understanding of data protection and data lifecycle management concepts.
• Ability to evaluate the security implications of emerging technologies, including artificial intelligence and automation solutions.
• Proven ability to work effectively with teammates, business partners, vendors, and other stakeholders to accomplish objectives and resolve security-related issues.
• Skill in developing clear technical documentation and security training materials.
• Strong analytical, diagnostic, and problem-solving skills with the ability to identify, assess, and resolve complex security issues.
• Strong configuration, implementation, and solution-design skills.
• Self-motivated and able to take initiative and drive projects to completion in a project-based environment.
• Excellent organizational and time-management skills, including the ability to independently manage multiple priorities and deadlines in a fast-paced, evolving environment.
• Ability to maintain confidentiality and exercise sound judgment when working with sensitive information and security-related matters.
• Excellent verbal and written communication skills with the ability to effectively communicate with individuals of diverse backgrounds and technical skill levels.
• Ability to influence others and build consensus without direct authority.
• Independent thinker with strong critical-thinking and analytical capabilities.
• Team-oriented with a desire to collaborate and engage with others in day-to-day activities.
• Commitment to fostering a positive work environment and supporting team and organizational success.
• Unequivocal commitment to the highest standards of personal and business ethics and conduct.
• Mission-driven, guided by core values, and a pleasure to work with.

EXPERIENCE Requirements

• Five years of experience working in information security.
• Three years of experience designing, implementing, or administering enterprise security technologies and controls.
• Experience with identity and access management, security architecture, data protection, cloud security, application security, or related security disciplines.
• Experience performing security assessments, risk analyses, vulnerability management, and security control implementation.
• Experience partnering with technical and business stakeholders to implement security improvements and best practices.

Preferences

• Experience supporting cloud-first environments.
• Experience supporting Microsoft-based security ecosystems or comparable enterprise security platforms.
• Experience with identity governance, data protection, security operations, or security monitoring technologies.
• Experience supporting security governance or compliance initiatives.

EDUCATION Requirements

• Bachelors’ degree in computer science, information systems, or related field.
• Equivalent combination of applicable education, training, certification, and experience may be considered in lieu of degree.

Preferences

• None.

CERTIFICATIONS & LICENSURE Requirements

• None.

Preferences

• Information Security Certifications (CISSP, CISM, Security+, SC-100, SC-200, SC-300, SC-500).

WORK ENVIRONMENT/PHYSICAL DEMANDS

General office environment; temperature controlled. Sitting for extended periods. Up to 25% travel.

Wounded Warrior Project® is an equal opportunity employer committed to providing equal employment opportunity to all persons without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, marital status, citizenship, age, veteran or military status, disability, genetic information, or any other characteristic protected by law.

Please note: Wounded Warrior Project is not seeking assistance or accepting unsolicited resumes from search firms without a written search agreement in place. All resumes submitted by search firms to any employee at Wounded Warrior Project via email, the Internet or directly to hiring managers at Wounded Warrior Project in any form without a valid written search agreement in place will be deemed the sole property of Wounded Warrior Project, and no fee will be paid in the event the candidate is hired by Wounded Warrior Project as a result of the referral or through other means.

Wounded Warrior Project® (WWP) is a veterans service organization that is transforming the way America’s wounded veterans are empowered, employed, and engaged in their communities. WWP™ works with warriors and their families to create paths toward success as they transition back into civilian life. Through direct programs and services, WWP connects warriors to a network of support and resources to address their evolving needs. The WWP team is passionate about creating impact—and since 2003, has improved the lives of over half a million warriors and their families. In fact, many WWP employees are veterans themselves and have experienced firsthand the benefits of its programs and services Wounded Warrior Project® is an equal opportunity employer committed to providing equal employment opportunity to all persons without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, marital status, citizenship, age, veteran or military status, disability, genetic information, or any other characteristic protected by law.