Information Security Engineer #1057679

FastTek Global; Michigan; On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical and Dental

Vision

Personal Time Off (PTO) Program

Long Term Disability

Life Insurance

401(k) with match

Job summary

FastTek Global is seeking an Information Security Engineer in Michigan. You will be responsible for implementing and monitoring security controls, conducting assessments, and collaborating with various teams. This role requires a minimum of 5 years' experience and knowledge of Microsoft 365 Security tools.

You will work closely with IT personnel to enhance security posture and ensure compliance with regulations. Benefits include comprehensive medical coverage, PTO, and a 401(k) with matching.

Qualifications

• Minimum of 5 years' security experience, including implementation and management.
• Deep knowledge of Microsoft 365 Security and Compliance tools required.
• Bachelor's degree in Information Security or related field preferred.
• Understanding of security frameworks such as NIST SP 800-171 preferred.

Responsibilities

• Implement and monitor technical security controls.
• Conduct regular security assessments and vulnerability scans.
• Collaborate with IT to integrate security into the organization's infrastructure.
• Lead root cause analysis on security incidents.

Skills

Microsoft 365 Security and Compliance tools

Vulnerability management

Incident investigation

Risk assessment

Communication with diverse teams

Education

Bachelor's degree in Information Security or related field

Relevant certifications (Security+, CISSP)

Tools

Microsoft Sentinel

Azure

Active Directory

AWS

GCP

Job description

Michigan Information Security Engineer #1057679

You will be responsible for implementing and monitoring technical security controls to ensure compliance with our requirements and enhance the overall security posture of the organization. You will be a direct report to the VP, Security, working closely with security, IT personnel, software engineers, and partners across our businesses to identify and remediate vulnerabilities and deficient controls, investigate anomalies, and implement processes and technology that systematically reduce risk to the organization.

What you get to do

• Design, implement, and manage security controls, leveraging Microsoft 365 E5 Security and Compliance and Azure.
• Analyze systems and networks for compliance with our policy, industry standard methodologies and regulations.
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and address potential security risks.
• Fully leverage Microsoft Sentinel, increasing observability and monitoring, promptly responding to, and tuning alerts to mitigate threats, minimize impact, and reduce noise.
• Collaborate with IT and other departments to ensure security is integrated into all aspects of the organization's infrastructure and processes.
• Stay up-to-date with the latest security trends, threats, and technologies to continually improve the organization's security posture.
• Assist in the development and execution of business impact assessments, incident response plans and disaster recovery procedures with collaborators across us.
• Work with Security and IT personnel to prepare and manage Information Assurance documentation including System Security Plans (SSPs) and Plans of Action & Milestones (POA&M).
• Lead root cause analysis on security incidents and provide recommendations for containment and remediation.
• Prepare and present regular reports on key performance indicators, security metrics, and incidents to senior management.
• Evangelize information security and foster a security culture.

What you bring to the Team

• Minimum of 5 years' security experience, including implementation and management of security controls, vulnerability management, and investigations.
• Deep knowledge and experience with Microsoft 365 Security and Compliance tools and Azure Sentinel required. Specific experience with Microsoft Purview (MIP, DLP, DSPM) strongly preferred.
• Demonstrated ability to prioritize and manage multiple workloads efficiently, and communicate effectively with diverse teams and stakeholders to ensure timely and successful completion of security initiatives.
• Bachelor's degree in Information Security (or related field) and/or relevant certifications (e.g., Security+, Microsoft Cybersecurity Architect Expert, CMMC Certified Professional, CISSP) preferred.
• Specific experience administering and securing complex multi-forest Active Directory and multi-cloud (AWS, Azure, & GCP) environments preferred.
• Background supporting security and compliance initiatives in the manufacturing and/or defense industries preferred.
• Understanding of security frameworks and standards, specific experience with NIST SP 800-171 and other 800-series publications preferred.
• To conform to U.S. Government technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., or protected individual as defined by 8 U.S.C 1324b(a)(3).

Benefits

Our benefits are second to none and thanks to our flexible benefit options you can choose the benefits you need or want. Options include:

• Medical and Dental (FastTek pays majority of the medical program)
• Vision
• Personal Time Off (PTO) Program
• Long Term Disability (100% paid)
• Life Insurance (100% paid)
• 401(k) with immediate vesting and 3% (of salary) dollar-for-dollar match