Information Security Engineer II

First Command Financial Services, Inc.; Fort Worth (TX); On-site; USD 85,000 - 115,000; Full time

Job summary

First Command Financial Services, Inc. is looking for an Information Security Engineer in Fort Worth, Texas. In this critical role, you will help protect the organization’s data and systems from cyber threats, support the implementation of security controls, and collaborate with IT team members on security initiatives. Candidates should have a bachelor's degree and at least 3 years of IT Security experience, including familiarity with data loss prevention and vulnerability testing. Key certifications include CompTIA Security+.

Qualifications

• Minimum of 3 years’ experience in IT Security.
• Ability to conduct and interpret security assessments.
• Familiarity with ISO, NIST, and other security standards.

Responsibilities

• Monitor security alerts to prevent and investigate threats.
• Provide guidance on security issues.
• Conduct security reviews and develop improvement recommendations.

Skills

Analytical skills

Communication skills

Knowledge of information security standards

Education

Bachelor’s degree in computer science or equivalent experience

Tools

Data loss prevention tools

Vulnerability and penetration testing tools

Privileged Access Management (PAM) tools

Job description

How will this role impact First Command?

As an Information Security Engineer, you will help protect the organization’s data, networks, and systems from cyber threats. You will support the design, implementation, and continuous improvement of security controls, and monitor for suspicious activity to help detect, investigate, and respond to security events. You will partner with IT and business stakeholders to strengthen security practices, reduce risk, and support security initiatives.

What will the employee do in this role?

• Monitor areas of responsibility to prevent, detect, and investigate security alerts
• Assist in reviewing and improving annual security initiatives and areas of focus
• Coordinate, facilitate, and maintain the schedule for access reviews
• Provide security guidance and troubleshoot security issues as required
• Manage and improve information security documentation as required
• Deliver appropriate and accurate metrics to management
• Participate as a key member of the Information Security team by supporting operational security initiatives and cross‑functional risk reduction efforts
• Stay up to date on new information technologies and apply innovations to the company’s security standards and best practices
• Collaborate with team members and other business functions, business partners, management, vendors, and external parties for information gathering and best practice recommendations
• Conduct security reviews, evaluations, and risk assessments, and develop recommendations for improvements as appropriate

What skills & qualifications do you need?

Education

• Hold a bachelor’s degree in computer science, Information Technology, or an engineering‑related field, or possess equivalent experience
• Minimum of 3 years’ background working in an IT Security capacity
• Knowledge of information security policy design
• Proficiency in data loss prevention tools and techniques
• Ability to conduct, interpret, and report on data loss prevention configuration alerts
• Familiarity with vulnerability and penetration testing tools and techniques
• Proficiency in conducting, interpreting, and reporting on vulnerability and penetration tests
• Experience participating in security audits
• Skill in monitoring for security events, evaluating, and responding where appropriate

Certifications

• Minimum Required: CompTIA Security+
• Additionally Preferred: CISSP, Microsoft Security Certifications (SC‑200 – Security Operations Analyst Associate), CCSP, CCNA, and CCNP: Security

Required Knowledge, Skills and Abilities

• Produce and maintain documentation and evidence with diligence
• Working knowledge of ISO, NIST, and other information security standards, laws, and regulations
• Strong analytical skills
• Take initiative and demonstrate comfort with self‑directed learning on industry risks and changes
• Perform risk analysis and provide recommendations to mitigate risk
• Communicate effectively in writing and verbally
• Speak confidently when dealing with internal constituents
• Identify problems, review related information, develop and evaluate options, and implement solutions
• Build domain knowledge of our environment to understand long‑term risk areas that may develop as systems evolve
• Incorporate industry security standards into practical security operations, network operations, and application development practices
• Familiarity with Privileged Access Management (PAM) tools and concepts
• Knowledge of computer networking concepts and protocols, and network security
• Working knowledge of the Agile Framework