Information Security Engineer

Requisition #:216721

Location:

Atlanta, GA 30339

Category:

IT

Salary:$60,000.00 - $ per year

Position Details

Join a Company That Puts People First-and Wins Awards Doing It!

At Aveanna, we're proud to create a workplace where you feel valued, supported, and inspired. Here's what sets us apart:

Award-Winning Workplace

* Recognized for Best Leadership, Best Diversity, Best Company for Women, Best Career Growth, Work-Life Balance, Happiness, and Top-Rated Outlook in 2025.

* Proud partner of the Military Spouse Employment Partnership.

Connection & Support

* Employee Connection Groups:
Spaces to share experiences and build community.

* Social Circles:
Connect over shared interests-books, music, movies, and more.

* At Aveanna, your well-being matters. That's why on Wellness Wednesday's, we give you tools to recharge, reset and refocus.

Inclusive Growth

* Open learning sessions for all employees-because we grow stronger together.

Aveanna Cares - Service with Heart

* Every year, we embrace our Month of Service, giving you the chance to volunteer in your local community with your team. It's a powerful way to give back, connect, and live our values beyond the workplace.

Real Help When You Need It Most

* Through the Aveanna Employee Relief Fund, we stand by each other during life's toughest moments-offering financial assistance to teammates facing unexpected hardships. Because here, care goes beyond the job description.

Requirements

JOB OVERVIEW

The Information Security Engineer is responsible for the maturing of IT security programs to meet security requirements related to function, protection, assurance, risk management, and compliance. This individual will be responsible for documenting, testing and maturing a comprehensive information security program to protect all aspects of business and application assets across the organization.

ESSENTIAL JOB FUNCTIONS

* Facilitate architecture, design, implementation, deployment, and operational discussions to ensure HIPAA and PCI compliant technology solutions.

* Validate current security standards against industry best practices and provide recommendations for improvements.

* Use vulnerability management tools to identify and prioritize risks across the enterprise.

* Research, evaluate, design, test, recommend and plan the implementation of new or updated information security technologies.

* Document and validate business procedures against published policies.

* Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems.

* Play an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned. Complete remediation activities and initiate actions to ensure that compliance and security gaps are successfully addressed.

* Research and assess new threats and security alerts and recommend remedial actions.

* Develop plans for security systems by evaluating network and security technologies; developing requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices

* Interface with the Project Management teams to ensure security services are met in all phases of the SDLC.

* Business continuity and disaster recovery validation against SLA definitions.

* Support compliance and financial audit requests.

QUALIFICATIONS

Required

* 3 to 5 years of experience in IT, with a minimum of one year in security architecture.

* Experience conducting disaster recovery, business continuity, incident response exercises.

* In-depth experience implementing security solutions.

* Knowledgeable in the design and implementation of security architectures that enable well integrated transactional, collaborative and analytical systems.

* In depth knowledge of information security regulations such as, FISMA, HIPAA, HITECH, PSQIA, Gramm-Leach-Bliley, SOX.

* In depth knowledge CIS, NIST, and ISO 27001 standards.

* Ability to perform vulnerability scans and provide remediation. Tenable Nessus experience a plus.

* Experience with EDR solutions.

* Experience with integrating, updating, and tuning a SIEM.

* In depth knowledge of Microsoft on prem and cloud environments including all security blades. Purview and Intune experience is a plus

* Experience with maintaining AV and endpoint encryption suite.

* Exceptional interpersonal skills, including teamwork, facilitation and negotiation.

* Must be able to work independently with minimal supervision.

* Ability to perform network forensics and resolve IDS alerts.

* Ability to rapidly comprehend the functions and capabilities of new technologies.

* Strong knowledge in Windows and Network administration.

* Ability to perform system hardening.

Preferred

* Certifications:

CISSP, OSCP, CISA preferred

* Known publications in the security field (blogs, recorded presentations, or…