Sr. Information Security Engineer

LaunchCode; St. Louis (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

LaunchCode, partnering with an established organization, seeks a Senior Information Security Engineer to protect enterprise systems, data, and infrastructure across a complex IT environment. You will own critical security platforms, strengthen monitoring, and shape the organization’s security posture.

You will identify vulnerabilities, evaluate risk, and implement improvements in collaboration with technical teams and business stakeholders.

Qualifications

• 7+ years IT experience with 3+ years hands-on information security.
• Experience with Microsoft 365 and enterprise security technologies.
• Experience securing Azure and on-prem Active Directory environments.
• PowerShell and regular expressions proficiency.
• Experience with software development security and/or DevSecOps practices.
• Hands-on experience with proactive risk identification and mitigation, including penetration testing, network vulnerability assessments, and system risk profiling.
• Experience with security incident detection, investigation, response, and forensics.
• Strong understanding of networking concepts, protocols, and services.
• Excellent written and verbal communication skills across technical and non-technical teams.
• Self-motivated and able to own projects end-to-end.

Responsibilities

• Design, implement, manage, and troubleshoot enterprise security platforms (DLP, SIEM, UEBA, endpoint protection, data auditing).
• Evaluate systems for policy compliance and security best practices.
• Identify opportunities to strengthen security controls and implement improvements with stakeholders.
• Conduct threat, vulnerability, and risk assessments across systems and networks.
• Develop security monitoring, visibility, and detection capabilities across information systems.
• Lead security incident detection, investigation, response, and forensics activities.
• Analyze and report on security incidents, vulnerabilities, threats, and trends.
• Partner with auditors to evaluate controls and improve risk management practices.
• Stay current on emerging cybersecurity threats, technologies, and best practices.
• Provide security guidance and training to end users and support security issues as needed.
• Participate in after-hours on-call rotation.

Skills

Microsoft 365

Azure

PowerShell

DevSecOps

Penetration testing

Network security

Incident response

Communication

Troubleshooting

Ownership

Tools

Active Directory

Azure

Job description

Please note: This is not a direct LaunchCode position. LaunchCode is partnering with an established organization to help fill this direct-hire opportunity. As a nonprofit, LaunchCode reinvests proceeds from our recruiting partnerships into educational programs that create pathways into technology careers. By helping connect talented professionals with great opportunities, you're also helping support the next generation of tech talent. The organization's name will be shared during the interview process.

Our partner organization is an established, privately held company with a long history of delivering innovative products and solutions to customers around the world. The organization takes pride in its commitment to quality, continuous improvement, and employee development. Employees are part of a collaborative team where their contributions make a meaningful impact, and they have opportunities to work with evolving technologies while building long-term careers.

Position Overview

The Senior Information Security Engineer will play an important role in protecting enterprise systems, infrastructure, and data across a complex IT environment. This position offers the opportunity to take ownership of critical security platforms, strengthen security monitoring and response capabilities, and help shape the organization's overall security posture.

Working across IT and business teams, you will identify vulnerabilities, evaluate risk, improve security processes, and implement solutions that protect the organization against evolving threats. This is a hands-on engineering role for someone who enjoys solving challenging technical problems, improving security infrastructure, and taking initiative.

What You'll Do

• Design, implement, manage, maintain, and troubleshoot enterprise security platforms, including Data Loss Prevention (DLP), Security Information and Event Management (SIEM), User and Entity Behavior Analytics (UEBA), endpoint protection, and data security and auditing solutions.
• Evaluate systems, software, processes, and IT environments for compliance with internal policies, regulatory requirements, and security best practices.
• Identify opportunities to strengthen security controls and recommend and implement improvements in collaboration with technical teams and business stakeholders.
• Conduct threat, vulnerability, and risk assessments to identify and address potential weaknesses across systems and networks.
• Develop and enhance security monitoring, visibility, and detection capabilities across enterprise information systems.
• Serve as a technical leader in security incident detection, investigation, response, and forensic activities.
• Analyze and report on security incidents, investigations, vulnerabilities, emerging threats, and overall security trends.
• Partner with internal teams and external auditors to evaluate security controls, address findings, and improve risk management practices.
• Stay current on emerging cybersecurity threats, technologies, tools, and industry best practices.
• Provide security guidance and occasional training to end users while promoting a culture of security awareness.
• Support end users with security-related technical issues as needed.
• Participate in an after-hours on-call rotation approximately every few weeks to provide support for critical security issues. After-hours incidents are generally infrequent, but availability is important when needed.

What You'll Bring

• 7+ years of experience in Information Technology, including 3+ years of hands-on information security experience. Relevant education may count toward up to four years of the overall experience requirement.
• Demonstrable experience with Microsoft 365 and enterprise security technologies.
• Experience securing and managing Azure and on-premises Active Directory environments.
• Proficiency with PowerShell and regular expressions.
• Experience with software development security and/or DevSecOps practices.
• Hands-on experience with proactive risk identification and mitigation, including penetration testing, network vulnerability assessments, and system risk profiling.
• Experience with security incident detection, investigation, response, handling, and forensics.
• Strong understanding of networking concepts, protocols, and services.
• Excellent written and verbal communication skills, with the ability to collaborate effectively across technical and non-technical teams.
• Strong troubleshooting and analytical skills, with a methodical approach to resolving complex technical issues.
• Self-motivated and comfortable taking ownership of projects, working independently, and driving tasks through completion.

This is a fully onsite position based in Bridgeton, MO. The role also includes participation in an after-hours on-call rotation approximately every few weeks. While critical incidents requiring after-hours support are typically uncommon, the engineer must be available to respond when necessary.