Information Security Engineer

Gotham Technology Group; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Gotham Technology Group is seeking a seasoned security operations professional to manage core security infrastructure, own SIEM operations, and guide end-to-end incident investigations.

The role involves leading security audits, vulnerability assessments, and coordinating with MSSP/SOC vendors, while evaluating new security technologies and staying aligned with business needs.

Qualifications

• Deep knowledge of security best practices across systems, networks, and telecommunications.
• Strong analytical, troubleshooting, and root-cause investigation skills.
• Excellent communication, documentation (SOPs, guidelines, architecture diagrams), and project-planning abilities.
• Comfortable balancing security with business needs; works well independently and in teams.
• Able to manage multiple projects in a fast-paced environment.
• Available for on-call rotation, off-hour emergency calls, and occasional travel.
• Reports to and collaborates closely with the Director of Information Security.

Responsibilities

• Manage core security infrastructure: IDS/IPS, firewalls, antivirus, web filtering, DLP, NAC, DDoS protection, third-party remote access, application whitelisting, and EDR solutions.
• Own SIEM operations and privileged account management systems.
• Investigate and resolve security events end-to-end.
• Conduct security audits, risk assessments, and firewall/network/system configuration reviews.
• Run vulnerability scans across networks, servers, systems, and applications.
• Produce weekly security metrics reports.
• Partner with consultants, MSSP/SOC vendors, and third-party providers on security services.
• Contribute security architecture input to project reviews.
• Evaluate and test emerging security technologies.

Skills

Incident response

Analytical thinking

Communication

Project management

Team collaboration

Tools

Microsoft Sentinel

Nessus

Qualys

Rapid7

Snort

Suricata

AlienVault

Defender for Endpoint

PowerShell

Python

CyberArk

BeyondTrust

Job description

This technical role is responsible for managing, supporting, implementing, and troubleshooting the Firm's full suite of security products, while leading day-to-day incident investigation, security assessments, and audits.

Responsibilities

• Manage core security infrastructure: IDS/IPS, firewalls, antivirus, web filtering, DLP, NAC, DDoS protection, third-party remote access, application whitelisting, and EDR solutions
• Own SIEM operations and privileged account management systems
• Investigate and resolve security events end-to-end
• Conduct security audits, risk assessments, and firewall/network/system configuration reviews
• Run vulnerability scans across networks, servers, systems, and applications
• Produce weekly security metrics reports
• Partner with consultants, MSSP/SOC vendors, and third-party providers on security services
• Contribute security architecture input to project reviews
• Evaluate and test emerging security technologies

Qualifications

• Deep knowledge of security best practices across systems, networks, and telecommunications
• Strong analytical, troubleshooting, and root-cause investigation skills
• Excellent communication, documentation (SOPs, guidelines, architecture diagrams), and project-planning abilities
• Comfortable balancing security with business needs; works well independently and in teams
• Able to manage multiple projects in a fast-paced environment
• Available for on-call rotation, off-hour emergency calls, and occasional travel
• Reports to and collaborates closely with the Director of Information Security

Technical Experience

• SIEM/IDS/IPS: Microsoft Sentinel; Vectra AI, Snort, Suricata, AlienVault, or similar
• Endpoint Security: CB Application Control, ThreatLocker, Microsoft Defender for Endpoint
• Vulnerability & Pen Testing: Nessus, Tenable, Rapid7 Nexpose, Cobalt Strike, Qualys
• Scripting: Python, PowerShell, VB
• PAM: CyberArk, BeyondTrust, or similar