Information Security Engineer

About the role

MicroStrategy is seeking an Information Security Engineer to strengthen our security posture across applications, databases, servers, workstations and operating systems. You will collaborate with network, compliance and operations teams to implement, monitor and automate security controls.

Key responsibilities

• Detect, monitor and track security vulnerabilities across the technology stack.
• Configure and tune SIEM performance and event data quality for optimal log correlation.
• Implement and maintain network access control technologies in partnership with the network team.
• Set up and manage SOAR tools, scripts, events and playbooks.
• Work with the compliance team to apply security controls aligned with NIST, FedRAMP, HiTRUST and ISO 27001.
• Guide network and operations teams on security best practices and automation.
• Deploy and support solutions such as intrusion detection, log management, data loss prevention, vulnerability management, web content filtering and configuration management.
• Develop operational documentation, policies, procedures and customer deliverables.
• Research emerging security products and recommend improvements.

Required profile

• Strong background in information security and vulnerability management.
• Experience working with compliance frameworks (NIST, FedRAMP, HiTRUST, ISO 27001).
• Ability to collaborate across network, systems and operations teams.
• Proven track record of automating security processes.

Required skills

• SIEM configuration and tuning
• SOAR tool implementation
• Shell scripting (bash, PowerShell)
• Python programming
• Regular expressions (regex)
• REST, SOAP, WSDL, XML, HTTP methods
• Network access control technologies
• Intrusion detection systems
• Log management platforms
• Data loss prevention solutions
• Vulnerability management tools
• Web content filtering
• Configuration management