Information Security Engineer III

icwgroup; San Diego (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

ICW Group, headquartered in San Diego, is hiring an Information Security Engineer III to design secure architectures and advance cybersecurity across cloud, data, and AI-driven environments. You will collaborate with engineering, cloud, and analytics teams to embed security from design through production.

This role focuses on reducing attack surfaces, vulnerability management, threat detection, and incident response while balancing risk, compliance, and business needs in a regulated insurance

Responsibilities

• Monitors cloud, on-prem, and SaaS environments for security threats using SIEM, EDR, cloud-native logging, and network telemetry.
• Assists with security incident response activities, including investigation, containment, remediation, and post-incident analysis.
• Lead or contribute to vulnerability management across cloud infrastructure, applications, containers, and data platforms.

Job description

Are you looking to make an impactful difference in your work, yourself, and your community? Why settle for just a job when you can land a career? At ICW Group, we are hiring team members who are ready to use their skills, curiosity, and drive to be part of our journey as we strive to transform the insurance carrier space. We're proud to be in business for over 50 years, and its change agents like yourself that will help us continue to deliver our mission to create the best insurance experience possible.

Headquartered in San Diego with regional offices located throughout the United States, ICW Group has been named for the twelfth consecutive year in a row and for the 20th time overall as a Top 50 performing P&C organization offering the stability of a large, profitable and growing company combined with a focus on all things people. It's our team members who make us an employer of choice and the vibrant company we are today. We strive to make both our internal and external communities better everyday! Learn more about why you want to be here!

PURPOSE OF THE JOB

The purpose of the Information Security Engineer III is to design secure architectures and develop cybersecurity approaches and techniques to protect ICW Group's cloud, data, and/or AI-driven environments. This position will assist with strategic initiatives for short and long-term plans to identify and reduce the attack surface across applications and systems. This role partners closely with application, cloud, data, and analytics teams to ensure security is embedded into systems from design through production

This role supports ICW's modern data initiatives by reducing risk, strengthening security controls, and enabling secure adoption of new technologies in a highly regulated insurance environment. The engineer contributes across vulnerability management, threat detection, and incident response while providing practical security guidance that balances risk, compliance, and business needs.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Monitoring, Detection, and Incident Support

• Monitors cloud, on-prem, and SaaS environments for security threats using SIEM, EDR, cloud-native logging, and network telemetry.
• Assists with security incident response activities, including investigation, containment, remediation, and post-incident analysis.
• Researches and implements methods to remediate network and application security vulnerabilities.
• Leads and participates in security architecture controls reporting, compliance audits, monthly and ad-hoc statistics and trends, and risk-focused reports including internal and 3rd party Risk Assessments.
• Produce risk-focused security findings and communicate clearly with technical and non-technical stakeholders.
• Conducts threat hunting and root-cause analysis to identify anomalous behavior, exploitation attempts, and indicators of compromise.
• Investigates potential data misuse, data exfiltration, and anomalous access patterns using logs, DLP, and monitoring tools.

Cloud & Generalist Security Responsibilities.

• Prepares and analyses system security reports by collecting, analyzing, and summarizing data and trends and makes recommendations to improve security.
• Serve as a senior technical contributor across cloud security, including IAM, logging, monitoring, detection, and secure deployment patterns.
• Lead or contribute to vulnerability management across cloud infrastructure, applications, containers, and data platforms.
• Participate in offensive and defensive security activities, including threat modeling, red team exercises, blue team detection improvements, and threat hunting.
• Support incident response investigations involving cloud misconfigurations, data exposure, and/or AI-related security events.
• Perform security architecture reviews and provide guidance to engineering teams to reduce risk while enabling business objectives.
• Implement and improve security controls that strengthen ICW's overall security posture while supporting modern cloud and data initiatives.

Security Architecture, Standards, and Risk

• Partners with Engineering, Infrastructure, Cloud, Data, and Operations teams to embed security into system design and delivery.
• Lead security reviews for new data, analytics, and/or AI initiatives, including architecture reviews and risk assessments prior to production deployment.
• Conduct threat modeling and security design reviews for systems involving data, analytics, AI, and/or cloud services.
• Create and maintain technical security standards and guardrails related to data protection, cloud usage, and/or AI security.
• Partner with internal teams to remediate security findings and track remediation activities through closure.
• Provide security guidance that balances risk reduction with delivery speed and business priorities.

Collaboration and Enablement

Executes technical and process changes required to adopt, maintain, and adjust InfoSec controls as required to manage the company's risks and align with industry best practices