Information Security Engineer

Municipal Securities Rulemaking Board; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Municipal Securities Rulemaking Board is seeking an experienced Information Security Engineer to strengthen our enterprise security program. The role focuses on securing web apps, cloud environments, networks, SaaS platforms, and enterprise systems while supporting day-to-day security operations and incident response.

The ideal candidate combines hands-on technical expertise with strong collaboration across teams, driving vulnerability management, detection engineering, IAM initiatives, and

Qualifications

• 7+ years of experience in information security or related roles.
• Strong understanding of security principles, frameworks, and best practices.
• Experience with incident response and threat detection.
• Experience with IAM, networking, and endpoint security.
• Experience with cloud and application security.

Responsibilities

• Triages and responds to security alerts, phishing reports, vulnerabilities, and end-user security requests.
• Serves as escalation point for security investigations and operational issues.
• Supports vulnerability management activities including scanning, assessments, penetration testing, and remediation.
• Designs and implements security controls for web apps, cloud infrastructure, SaaS platforms, and enterprise systems.
• Partners with developers and IT to remediate vulnerabilities in applications and infrastructure.
• Enhances SIEM, anti-malware, and detection capabilities through custom detections and automation.
• Supports enterprise security initiatives across networks, endpoints, identity platforms, and office environments.
• Leads Identity and Access Management (IAM) efforts.
• Reviews and improves security configurations across cloud and SaaS environments.
• Monitors compliance with security best practices and organizational requirements.
• Supports security awareness training and phishing simulations.
• Educates employees on cybersecurity risks and best practices.

Skills

Incident response

Detection engineering

IAM

Networking

Endpoint security

Cloud security

Application security

Tools

SIEM

Vulnerability management tools

Security tooling

Job description

We are seeking an experienced Information Security Engineer to help strengthen our enterprise security program. This role is responsible for securing web applications, cloud environments, networks, SaaS platforms, and enterprise systems while supporting day-to-day security operations and incident response activities.

The ideal candidate combines strong technical expertise with hands-on operational experience and the ability to collaborate effectively across teams. This position plays a key role in vulnerability management, detection engineering, cloud and application security, identity and access management, and continuous improvement of the company’s overall security posture.

Key Responsibilities

Security Operations & Incident Response

• Triage and respond to security alerts, phishing reports, vulnerabilities, and end-user security requests
• Serve as a key escalation point for security investigations and operational issues
• Support vulnerability management activities including scanning, assessments, penetration testing, and remediation

Security Engineering & Architecture

• Design and implement security controls for web applications, cloud infrastructure, SaaS platforms, and enterprise systems
• Partner with developers and IT teams to identify and remediate application and infrastructure vulnerabilities
• Enhance SIEM, anti-malware, and detection capabilities through custom detections and automation
• Support enterprise security initiatives across networks, endpoints, identity platforms, and office environments
• Lead Identity and Access Management (IAM) efforts
• Review and improve security configurations across cloud and SaaS environments

Governance & Security Awareness

• Monitor compliance with security best practices and organizational requirements
• Support security awareness training and phishing simulation programs
• Educate employees on cybersecurity risks and best practices

Qualifications

• 7+ years of experience in information security, cybersecurity engineering, or related roles
• Strong expertise in areas such as Incident response, Detection engineering, IAM, Networking and endpoint security, Cloud security and/or application security
• Experience with SIEM, vulnerability management, and security tooling
• Strong troubleshooting, analytical, and problem-solving skills
• Excellent communication and collaboration abilities
• Strong understanding of information security principles, frameworks, and best practices

Direct applicants only. We are not accepting solicitation from recruitment agencies at this time.

BENEFITS

We are proud to offer a comprehensive benefits package that supports our employees’ overall mental and physical health and wellness. We aim to empower our employees with the resources they need to achieve a successful work life integration. For a comprehensive list of our benefits