Information Security Engineer

Municipal Securities Rulemaking Board; Washington (District of Columbia); On-site; Full time

Job description

We are seeking an experienced Information Security Engineer to help strengthen our enterprise security program. This role is responsible for securing web applications, cloud environments, networks, SaaS platforms, and enterprise systems while supporting day-to-day security operations and incident response activities.

The ideal candidate combines strong technical expertise with hands-on operational experience and the ability to collaborate effectively across teams. This position plays a key role in vulnerability management, detection engineering, cloud and application security, identity and access management, and continuous improvement of the company’s overall security posture.

Key Responsibilities

Security Operations & Incident Response

• Triage and respond to security alerts, phishing reports, vulnerabilities, and end-user security requests
• Serve as a key escalation point for security investigations and operational issues
• Support vulnerability management activities including scanning, assessments, penetration testing, and remediation

Security Engineering & Architecture

• Design and implement security controls for web applications, cloud infrastructure, SaaS platforms, and enterprise systems
• Partner with developers and IT teams to identify and remediate application and infrastructure vulnerabilities
• Enhance SIEM, anti-malware, and detection capabilities through custom detections and automation
• Support enterprise security initiatives across networks, endpoints, identity platforms, and office environments
• Lead Identity and Access Management (IAM) efforts
• Review and improve security configurations across cloud and SaaS environments

Governance & Security Awareness

• Monitor compliance with security best practices and organizational requirements
• Support security awareness training and phishing simulation programs
• Educate employees on cybersecurity risks and best practices

Qualifications

• 7+ years of experience in information security, cybersecurity engineering, or related roles
• Strong expertise in areas such as Incident response, Detection engineering, IAM, Networking and endpoint security, Cloud security and/or application security
• Experience with SIEM, vulnerability management, and security tooling
• Strong troubleshooting, analytical, and problem-solving skills
• Excellent communication and collaboration abilities
• Strong understanding of information security principles, frameworks, and best practices

Direct applicants only. We are not accepting solicitation from recruitment agencies at this time.

BENEFITS

We are proud to offer a comprehensive benefits package that supports our employees’ overall mental and physical health and wellness. We aim to empower our employees with the resources they need to achieve a successful work life integration. For a comprehensive list of our benefits