InfoSec Security Engineer – Cross‑Function Security Technology Support

About the role

We are seeking a Cross‑Function Security Technology Support Engineer to join our Security Technology Operations team. The role focuses on developing, troubleshooting, and securing a wide range of cloud and on‑premises environments while collaborating with technical teams, stakeholders, and customers.

Key responsibilities

• Document security assessments, prepare RFPs for compliance, and create remediation plans.
• Collaborate with third‑party vendors to evaluate the security of their systems and integrations.
• Participate in incident response, investigating and resolving security incidents promptly.
• Conduct security assessments and penetration testing using industry‑grade tools.
• Identify vulnerabilities and provide actionable recommendations to mitigate risks.
• Work with cross‑functional teams to design and implement security controls that meet industry standards.
• Stay current with security trends, threats, and technologies and advise on improvements.
• Perform code reviews to uncover security flaws and suggest remediation.
• Develop and maintain security testing methodologies, tools, and frameworks.
• Deliver security training and awareness programs for employees.

Required profile

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• Strong experience in security testing, including vulnerability assessments, penetration testing, and code review.
• Proficiency with industry‑grade security testing tools.
• In‑depth knowledge of web application security, network protocols, operating systems, and cloud platforms.
• Familiarity with security frameworks and standards such as OWASP, NIST, ISO 27001, and PCI DSS.
• Experience scripting for automation and tool development (Python, Ruby, PowerShell).

Required skills

• AWS and Digital Ocean cloud environments
• On‑premises infrastructure
• Networking concepts and mechanisms
• Firewalls and proxies
• Endpoint Detection & Response (EDR) and antivirus/anti‑malware solutions
• Vulnerability scanning tools
• IPS/IDS technologies
• Python (and other scripting languages)
• DNS, encryption, and TLS
• Security Information and Event Management (SIEM)
• Email security technologies (DMARC, DKIM, SMTP)
• Penetration testing tools and methodologies
• Code review and static analysis
• Security frameworks: OWASP, NIST, ISO 27001, PCI DSS