Lead Information Security Architect / Engineer

pathwayRP; Durham (NC); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading recruitment agency is looking for a Lead Information Security Architect/Engineer in Durham, NC. This full-time position requires expertise in designing security measures and analyzing technology for vulnerabilities. Candidates should have over 5 years of experience in various security domains and be proficient in using risk assessment models. Excellent teamwork and communication abilities are essential. The agency offers equal employment opportunities and promotes a diverse workforce.

Qualifications

• 5+ years of experience in information security domains such as access management, cloud, mobile, endpoint security.
• Experience analyzing technology solutions using risk assessment models.
• Knowledge of industry security standards and frameworks.
• Understanding of modern security architectures and their challenges.

Responsibilities

• Design a process to analyze technology solutions for threats and vulnerabilities.
• Review security configuration checklists for technology platforms.
• Consult on security services within the engineering organization.
• Identify and recommend security safeguards in a complex environment.

Skills

Access management

Cryptography

Data loss prevention (DLP)

Cloud technologies

Endpoint security

Incident response

Malware analysis and protection

Network security

Communication skills

Education

Bachelor’s degree in Computer Science or related field

Equivalent work experience (8+ years)

Tools

ISO 27001

NIST Special Publications

Job description

Lead Information Security Architect / Engineer

EmTacq specializes in EMployer Talent ACQuisitions, matching the most qualified candidates with the most competitive positions available. We pride ourselves on not just putting bodies in seats, rather matching professionals to their careers. We are headquartered in the Raleigh / Durham, NC area. However, as a recruiting agency we service companies and candidates across the United States. We are your best source for professional, value driven low cost recruitment services.

Full-time

The Lead Information Security Engineer will be responsible for designing and implementing a process to analyze the design of technology solutions for threats, attacks, and vulnerabilities that could affect the control environment. Must be a subject matter expert (SME) with strong collaboration skills to work with cross functional teams to ensure the design of technology solutions complies with information security policies, and regulatory obligations.

The Lead Information Security Engineer must have the ability to identify, document, and recommend security safeguards and configurations in a highly complex environment with a demonstrated ability to recognize, and appropriately incorporate layered security safeguards within the network, application, and data layers from a defender’s perspective. In this role you must be a positive professional, adaptable, pragmatic, and who is comfortable in delivering clear and concise information at both a technical and managerial level.

Responsibilities:

• Design and implement a process to analyze the design of technology solutions for threats, attacks, and vulnerabilities that could affect the client's control environment.
• Review and approve security configuration checklists (e.g., hardening or lockdown guides) for technology platforms and solutions (e.g., operating systems, databases, firewalls, etc.).
• Provide security consulting services internally to the engineering organization by giving guidance and functioning as an information security SME.
• Identify, document, and recommend security safeguards and configurations in a highly complex environment with a demonstrated ability to recognize, and appropriately incorporate layered security safeguards within the network, application, and data layers from a defender’s perspective.

Required Experience

• 5+ years of experience in one or more of the following information security domains: access management, cryptography, data loss prevention (DLP), emerging technologies (i.e., cloud, mobile, etc.), endpoint security, incident response, malware analysis and protection, network and perimeter security, or web and mobile application security.
• 5+ years of experience analyzing the design of technology solutions using common industry frameworks such as DREAD, SSE-CMM (ISO/IEC 21827), STRIDE, or other risk assessment models.
• 5+ years of working knowledge of various industry security standards and frameworks including: ISO 27001, ISF Standard of Good Practice (SoGP), NIST Special Publications, etc.
• 5+ years of working knowledge of modern enterprise and security architectures, their challenges, common approaches to overcome their challenges, and their inherent security strengths and weaknesses.
• Teamwork and communication skills, both written and verbal.

Preferred Experience

• Bachelor’s degree in Computer Science, Information Systems, or related field. 8+ years of equivalent work experience required in lieu of degree is acceptable.
• Professional certifications such as: CISSP, CISA, CISM, GIAC, CGEIT, CRISC, CEH, or other relevant industry certification strongly preferred.

Our client is proud to be an equal opportunity/affirmative action employer. We are committed to attracting, retaining and maximizing the performance of a diverse and inclusive workforce. It is their policy to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, creed, religion, national origin, alienage or citizenship status, age, sex, sexual orientation, gender identity or expression, marital or domestic/civil partnership status, disability, veteran status, genetic information or any other basis protected by law.