Sr. Security Engineer

Conexess Group; Plantation (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Conexess is seeking a Sr. Security Engineer to design, implement, and manage advanced security solutions across our IT infrastructure. You will lead incident response, vulnerability management, and security operations to prioritize and minimize cyber risk across the organization.

The role focuses on securing networks, cloud environments, and systems while aligning with regulatory requirements and industry best practices. Collaboration with DevOps and IT teams is essential.

Qualifications

• Bachelor’s degree in IT Security or Computer Science or equivalent experience.
• Active information security or cybersecurity certification.
• 5+ years of hands-on cybersecurity experience.
• Strong communication, problem-solving and cross-functional collaboration skills.
• Experience with building and operating secure IT infrastructure across networks, cloud, and endpoints.

Responsibilities

• Monitor and respond to security incidents and events.
• Lead vulnerability assessments and remediation efforts.
• Design and implement security controls, including firewalls and IDS/IPS.
• Architect secure systems and cryptographic solutions.
• Advance security posture via tooling, automation, and best practices.

Skills

Incident response

Vulnerability management

Security architecture

Firewalls

IDS/IPS

SIEM

Encryption

MFA

Cloud security

Networking TCP/IP

Education

Bachelor’s degree in IT Security or CS

Tools

SIEM platforms

Endpoint protection

Job description

Our history:

From our start in 2009, Conexess has established itself in 3 markets, employing nearly 200+ individuals nationwide. Operating in over 15 states, our client base ranges from Fortune 500/1000 companies to mid-small range companies. For the majority of the mid-small range companies, we are exclusively used due to our outstanding staffing track record

Our history:

From our start in 2009, Conexess has established itself in 3 markets, employing nearly 200+ individuals nationwide. Operating in over 15 states, our client base ranges from Fortune 500/1000 companies to mid-small range companies. For the majority of the mid-small range companies, we are exclusively used due to our outstanding staffing track record

Who We Are:

Conexess is a full-service staffing firm offering contract, contract-to-hire, and direct placements. We have a wide range of recruiting capabilities, from help desk technicians to CIOs. We are also capable of offering project-based work.

The Sr. Security Engineer plays a vital role in securing our IT infrastructure, networks, and systems. This role focuses on designing, implementing, and managing advanced security solutions, as well as ensuring that the organization's security posture aligns with best practices and regulatory requirements. This position leads security operations including incident response and vulnerability management to prioritize and minimize cyber risk across the organization.

Specific duties include, but are not limited to:

• Monitoring and Incident Response: Establish monitoring and detection mechanisms to identify potential threats, and lead or assist in responding to incidents.
• Vulnerability Management: Conduct vulnerability assessments, penetration testing, and remediation of security weaknesses.
• Security Orchestration and Automation: Automate tasks where possible, using scripting and configuration management tools.
• Design and Implementation of Security Systems: Architect and implement security controls, including firewalls, intrusion detection systems, and encryption technologies.
• Security Control Improvements: Review of applications and systems to ensure industry best practices and security hardening.

Position Requirements:

• Bachelor's Degree or equivalent experience in IT Security, Computer Science.
• A valid and active certification in Information Security or Cybersecurity.
• 5+ years of hands-on experience in cybersecurity or a related field, including areas like network security, cloud security, and threat intelligence.
• Innovative Mindset: Always looking for new tools, techniques, and strategies to improve the organization's security posture.
• Communication: Strong ability to convey technical security issues to non-technical audiences, including management and other stakeholders.
• Problem-Solving: Excellent troubleshooting skills with a proactive approach to solving complex security challenges.
• Collaboration: Ability to work well with cross-functional teams, including DevOps, IT, and development teams, to integrate security into all layers of the organization's infrastructure.
• Security Tools and Technologies: Proficiency with firewalls, IDS/IPS, endpoint protection, SIEM, encryption, VPNs, and multi-factor authentication (MFA).
• Penetration Testing and Vulnerability Management: Strong knowledge of vulnerability scanning tools and penetration testing techniques, with the ability to find and exploit weaknesses in an organization's security infrastructure.
• Network Security: In-depth understanding of networking protocols (TCP/IP, DNS, HTTP, SSL/TLS) and how to secure them.
• Cloud Security: Expertise in securing cloud infrastructures, particularly AWS, Azure or Google Cloud, including IAM, encryption, or security monitoring tools.
• SIEM and Logging: Experience with configuring and maintaining SIEM platforms and analyzing logs for sometimes unusual activities.

Preferred (one or more):

• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• GIAC Security Essentials (GSEC)
• Certified Cloud Security Professional (CCSP)
• AWS, GCP, or Azure Cloud Security Engineer Certification
• Or other relevant cybersecurity certifications
• DevSecOps: Experience integrating security into CI/CD pipelines and automating security controls in software development.
• Zero Trust Architecture: Understanding of Zero Trust security models and their application in modern IT environments.
• Identity and Access Management (IAM): Expertise in managing user identities and permissions, especially in cloud or hybrid environments.
• Threat Intelligence: Ability to analyze and apply threat intelligence to enhance the organization's defense mechanisms.