Information Security Lead/Engineer

LHH; Austin (TX); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Life insurance

Short-term disability

Commuter benefits

401K plan

Paid leave

EAP

Job summary

LHH in Austin, TX is seeking an Information Security Lead/Engineer to build and mature an organization-wide security program. This hands-on role blends security engineering, risk management, policy development, and governance to establish a solid foundation.

You will work directly with IT and business stakeholders to implement repeatable controls, drive incident response, monitoring, and automation as the program grows.

Qualifications

• 3+ years of information security experience
• Experience writing, developing, or implementing security policies and procedures
• Experience conducting risk assessments, vulnerability assessments, audits, or security reviews
• Broad exposure to security technologies such as firewalls, VPNs, email security, CASB, IAM, endpoint protection, and incident-response tooling
• Familiarity with Microsoft Azure cloud security concepts and best practices
• Understanding of security, privacy, data-protection, and governance considerations surrounding AI and generative AI
• Ability to work independently, investigate unfamiliar problems, and move initiatives forward without requiring extensive step-by-step direction
• Strong documentation, communication, and stakeholder-management skills
• Bachelor's degree in Computer Science, Cybersecurity, or a related field

Responsibilities

• Assess the organization's current security posture, systems, business processes, and risk exposure
• Develop, document, implement, and continuously improve information security policies, SOPs, standards, and controls
• Conduct security risk assessments, vulnerability assessments, audits, and gap reviews, then develop practical remediation plans
• Partner with business and IT stakeholders to understand workflows and identify risks that extend beyond traditional infrastructure and cybersecurity concerns
• Establish and improve controls around identity, access management, user lifecycle management, data protection, endpoint security, and vendor risk
• Audit systems, users, and processes for adherence to established security requirements
• Help establish repeatable incident-response procedures, initially handling issues directly and then documenting and transitioning appropriate response activities to IT support and systems teams
• Evaluate and help implement security technologies as the program matures, including potential SIEM, EDR, IAM, endpoint protection, email security, CASB, firewall, VPN, and vulnerability-management capabilities
• Evaluate new systems, applications, vendors, and technology initiatives from an information-security perspective
• Use automation, scripting, and AI-enabled tools to streamline recurring security reviews, monitoring, reporting, and administrative processes
• Help establish policies and safeguards for the responsible and secure use of generative AI and other AI technologies within the business
• Provide practical security guidance and awareness to both technical and nontechnical users

Skills

Information security

Policy development

Risk assessment

Auditing

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

SIEM

EDR

IAM

Firewalls

VPN

CASB

Job description

Full-Time | On-Site, 5 Days/Week | Direct Hire or Contract-to-Hire Considered

We are seeking a hands-on Information Security Lead/Engineer to help build and mature an organization-wide information security program. This is an excellent opportunity for a security professional who enjoys creating structure, solving problems, and having a direct impact rather than stepping into a mature security organization where every process is already defined.

The successful candidate will assess the current security environment, identify risks, develop policies and procedures, establish repeatable controls, and partner closely with IT and business stakeholders. The role combines elements of security engineering, security operations, risk management, GRC, auditing, and program development.

This is not a purely governance-focused position. We are looking for someone comfortable working directly in the details today who can help establish the foundation for a more mature security program over time.

What You'll Do

• Assess the organization's current security posture, systems, business processes, and risk exposure.
• Develop, document, implement, and continuously improve information security policies, SOPs, standards, and controls.
• Conduct security risk assessments, vulnerability assessments, audits, and gap reviews, then develop practical remediation plans.
• Partner with business and IT stakeholders to understand workflows and identify risks that extend beyond traditional infrastructure and cybersecurity concerns.
• Establish and improve controls around identity, access management, user lifecycle management, data protection, endpoint security, and vendor risk.
• Audit systems, users, and processes for adherence to established security requirements.
• Help establish repeatable incident-response procedures, initially handling issues directly and then documenting and transitioning appropriate response activities to IT support and systems teams.
• Evaluate and help implement security technologies as the program matures, including potential SIEM, EDR, IAM, endpoint protection, email security, CASB, firewall, VPN, and vulnerability-management capabilities.
• Evaluate new systems, applications, vendors, and technology initiatives from an information-security perspective.
• Use automation, scripting, and AI-enabled tools to streamline recurring security reviews, monitoring, reporting, and administrative processes.
• Help establish policies and safeguards for the responsible and secure use of generative AI and other AI technologies within the business.
• Provide practical security guidance and awareness to both technical and nontechnical users.

What We're Looking For

• 3+ years of information security experience, ideally with experience independently managing security risks, incidents, policies, procedures, or security technologies.
• Demonstrated experience writing, developing, or implementing security policies and procedures, rather than only operating within an established security program.
• Experience conducting risk assessments, vulnerability assessments, audits, or security reviews and translating findings into actionable remediation plans.
• Broad exposure to security technologies such as firewalls, VPNs, email security, CASB, IAM, endpoint protection, and incident-response tooling.
• Familiarity with Microsoft Azure/cloud security concepts and best practices.
• Understanding of security, privacy, data-protection, and governance considerations surrounding AI and generative AI.
• Ability to work independently, investigate unfamiliar problems, and move initiatives forward without requiring extensive step-by-step direction.
• Strong documentation, communication, and stakeholder-management skills.
• Ability to translate security requirements into practical controls that support rather than unnecessarily restrict the business.
• Bachelor's degree in Computer Science, Cybersecurity, or a related field.

The Ideal Background

This opportunity may be particularly well suited for a security professional who began in IT support, systems administration, infrastructure, or a smaller security team and progressively took ownership of security initiatives.

Why This Opportunity Stands Out

This isn't a maintenance-only security position.

You'll have the opportunity to influence how the organization's security program is designed, including:

• Security policies and operating procedures
• Identity and access controls
• Security auditing and automation
• Vendor and third-party security
• AI security and governance
• Future SIEM/EDR and security-tooling decisions
• Security awareness and employee education

This is an on-site position requiring daily office attendance. Some travel to branch locations by car or air may be required, and scheduled on-call or after-hours support may occasionally be necessary.

“Benefit offerings include medical, dental, vision, life insurance, short-term disability, additional voluntary benefits,

EAP program, commuter benefits, and 401K plan. Our program provides employees the flexibility to choose the type

of coverage that meets their individual needs. Available paid leave may include Paid Sick Leave, where required by

law; any other paid leave required by Federal, State, or local law; and Holiday pay upon meeting eligibility criteria.”

“Equal Opportunity Employer/Veterans/Disabled

To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://www.lhh.com/us/en/candidate-privacy

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

The California Fair Chance Act

Los Angeles City Fair Chance Ordinance

Los Angeles County Fair Chance Ordinance for Employers