Senior Information Security Engineer
WhatJobs Direct
About the role
Our organization is seeking a highly experienced Senior Information Security Engineer to join our growing security team in **Baltimore, Maryland, US**. This hybrid role combines the necessity of on-site collaboration for critical infrastructure management with the flexibility of remote work. You will be instrumental in designing, implementing, and maintaining robust security solutions to protect our digital assets and sensitive data. The ideal candidate will possess a deep understanding of network security, cloud security, and risk management frameworks. You will play a pivotal role in safeguarding our systems against evolving cyber threats.
Responsibilities: Design, deploy, and manage enterprise-level security technologies including firewalls, IDS/IPS, VPNs, and endpoint protection. Develop and implement security policies, standards, and procedures. Conduct regular security assessments, vulnerability scans, and penetration tests. Lead incident response efforts, including investigation, containment, eradication, and recovery. Manage and monitor cloud security posture for AWS, Azure, or GCP environments. Develop and implement security awareness training programs for employees. Collaborate with IT teams to ensure secure system configurations and deployments. Stay abreast of emerging security threats, vulnerabilities, and technologies. Develop and maintain security documentation, including architecture diagrams and runbooks. Contribute to the overall information security strategy and roadmap. Qualifications: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field. Master's degree preferred. Minimum of 6 years of progressive experience in information security engineering. Extensive knowledge of network security principles and protocols (TCP/IP, DNS, SSL/TLS). Hands-on experience with cloud security best practices and tools (AWS, Azure, GCP). Proficiency with security assessment tools and techniques. Strong understanding of security frameworks such as NIST, ISO 27001, or SOC 2. Experience with SIEM solutions and security monitoring tools. Relevant security certifications such as CISSP, CISM, or GIAC are highly desirable. Excellent problem-solving, analytical, and communication skills. Ability to work effectively in a hybrid work environment and collaborate across teams. Proven leadership skills and experience mentoring junior team members. This position requires a significant on-site presence during the initial onboarding and for critical infrastructure updates, with the remainder of the workweek offering remote flexibility. Candidates must be adaptable and committed to upholding the highest security standards.
Requirements
- Qualifications: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
- Minimum of 6 years of progressive experience in information security engineering
- Extensive knowledge of network security principles and protocols (TCP/IP, DNS, SSL/TLS)
- Hands-on experience with cloud security best practices and tools (AWS, Azure, GCP)
- Proficiency with security assessment tools and techniques
- Strong understanding of security frameworks such as NIST, ISO 27001, or SOC 2
- Experience with SIEM solutions and security monitoring tools
- Excellent problem-solving, analytical, and communication skills
- Ability to work effectively in a hybrid work environment and collaborate across teams
- Proven leadership skills and experience mentoring junior team members
- This position requires a significant on-site presence during the initial onboarding and for critical infrastructure updates, with the remainder of the workweek offering remote flexibility
- Candidates must be adaptable and committed to upholding the highest security standards
Responsibilities
- You will be instrumental in designing, implementing, and maintaining robust security solutions to protect our digital assets and sensitive data
- The ideal candidate will possess a deep understanding of network security, cloud security, and risk management frameworks
- You will play a pivotal role in safeguarding our systems against evolving cyber threats
- Responsibilities: Design, deploy, and manage enterprise-level security technologies including firewalls, IDS/IPS, VPNs, and endpoint protection
- Develop and implement security policies, standards, and procedures
- Conduct regular security assessments, vulnerability scans, and penetration tests
- Lead incident response efforts, including investigation, containment, eradication, and recovery
- Manage and monitor cloud security posture for AWS, Azure, or GCP environments
- Develop and implement security awareness training programs for employees
- Collaborate with IT teams to ensure secure system configurations and deployments
- Stay abreast of emerging security threats, vulnerabilities, and technologies
- Develop and maintain security documentation, including architecture diagrams and runbooks
- Contribute to the overall information security strategy and roadmap
Skills
Don't send a generic resume
Paste this job description into Mimi and get a resume tailored to exactly what the hiring team is looking for.
Get started free