The Information Security Engineer Contractor will perform skilled work supporting the development, implementation, and monitoring activities designed to protect IT systems, services, and capabilities.
- Work with the Security Engineering team on impactful Security projects
- Involvement as needed in incident response and maintaining lessons learned/action items
- Collaborate with other IT teams on Security Project efforts
- Stay updated on the latest security threats, technologies, and industry trends, and provide recommendations for improving security posture
- Ability to create and track relevant metrics for continuous improvement
- Assist with general tuning of tools and troubleshooting break/fix related to tools
- Creating and updating documentation as needed
- Design, implement, and maintain security controls across identity, endpoint, email, network, and cloud environments, translating security requirements into technical configurations.
- Deliver assigned engineering work from requirements and design through testing, rollout, and operational handoff; coordinate change control and rollback planning.
- Engineer and validate integrations among security platforms and enterprise systems, including identity, endpoint, and SIEM/logging workflows.
- Assess security configuration gaps, prioritize remediation with system owners, and verify that corrective changes address the identified risk.
- Create and maintain engineering artifacts such as technical designs, configuration records, test evidence, and operational handoff documentation.
The candidate will be working with various security tools and vendors:
Microsoft Suite - Azure/Entra ID/O365, Zscaler, Microsoft Defender for Endpoint, Carbon Black Protect, SIEM tools, Email Security tools, Identity Security tools
Qualifications:
- 3+ years of information technology experience required, 3+ years Security experience preferred
- Good hands-on knowledge of Windows workstations and/or servers
- Experience with IT Infrastructure components
- Experience with security concepts and tools
- Security+ Certification or better preferred
- Demonstrated experience implementing and supporting enterprise security controls.
- Hands-on experience configuring or integrating identity, endpoint, email, network, or cloud security controls in an enterprise environment.
- Experience troubleshooting security platform integrations, including identity, event/log data, or SIEM workflows.
Skills required:
High level of professionalism
- Demonstrated problem-solving and analytical skills
- Proficient, or able to gain proficiency with, a broad array of security software applications and tools.
- Ability to communicate effectively and efficiently
- Ability to work independently and/or as a team to meet delivery deadlines
- Organized with attention to detail
- Ability to translate security requirements into practical technical designs and implementation steps, then validate control effectiveness.
- Able to manage assigned engineering work independently, communicate technical risks and dependencies, and coordinate changes with partner teams.