Information Security Engineer

Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for an Information Security Engineer in Charlotte, NC (Hybrid).

Contract Duration: 18 Months.

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.
• Proof Point Knowledge
• Crowd Strike Knowledge
• Fire Eye Knowledge
• Cybersecurity
• 2+ years of Windows Administration experience
• 2+ years of hands‑on experience with EDR tools (Crowd Strike, Defender, etc.)
• Experience supporting enterprise email security platforms (Proofpoint, Fire Eye, or similar)
• 2+ years of Power Shell or Python experience
• 2+ years of SDLC experience
• 1+ year of Splunk experience
• Experience analyzing email threats (phishing, malware, URL-based attacks)
• Flexibility to support implementations outside of standard business hours
• Ability to deliver high‑quality technical artifacts and engineering solutions aligned with business objectives

• Systems Development Life Cycle (SDLC)
• Experience working with REST APIs
• Experience with Network Routing
• Bachelor’s or higher degree in Computer Science, Information Security, or related field
• Certifications such as CISSP, GIAC, OSCP, or Microsoft Certified:
  Security Operations Analyst
• Familiarity with cloud security (AWS, Azure, GCP) and hybrid environments
• Experience integrating email security, EDR/XDR, and SIEM platforms
• Knowledge of Zero Trust architecture, secure device onboarding, and network segmentation
• Understanding of security frameworks (e.g., NIST, ISO 27001, MITRE ATT&CK)
• Experience with phishing detection, email authentication (DMARC, DKIM, SPF), and BEC prevention strategies
• Ability to collaborate across technical and non-technical teams and clearly document technical requirements

• Consult on complex initiatives with broad impact and large-scale planning for Information Security Engineering.
• Review and analyze complex multi-faceted, larger scale or longer-term Information Security Engineering challenges that require in-depth evaluation of multiple factors including intangibles or unprecedented factors.
• Contribute to the resolution of complex and multi-faceted situations requiring solid understanding of the function, policies, procedures, and compliance requirements that meet deliverables.
• Strategically collaborate and consult with client personnel.
• Threat Detection, Monitoring & Incident Response
• Lead and participate in endpoint and email-related security incident response, including investigation, containment, and recovery
• Investigate phishing, malware delivery, and email-based attacks, including analysis of headers, payloads, URLs, and attachments
• Conduct technical investigations and post-incident digital forensics to identify root causes and recommend mitigation strategies
• Review and correlate endpoint telemetry, email logs, and security alerts to identify anomalies and threats
• Identify vulnerabilities, perform risk assessments, and evaluate remediation strategies across endpoint and email ecosystems
• Collaborate with incident response, threat intelligence, SOC, and infrastructure teams to investigate and remediate threats
• Perform advanced troubleshooting and root cause analysis across endpoint and email security platforms
• Continuously improve security posture through policy tuning, detection engineering, and proactive threat hunting
• Collaboration & Leadership
• Mentor junior engineers and analysts, providing technical guidance and fostering professional development
• Partner with peers, colleagues, and leadership to resolve issues, drive initiatives, and achieve team goals
• Coordinate with email security teams, SOC, and messaging infrastructure teams to ensure cohesive threat defense
• Documentation, Standards & Continuous Improvement
• Create and maintain technical documentation, security standards, and training materials
• Translate complex security requirements into actionable, scalable technical solutions
• Stay current with emerging threats, particularly phishing, business email compromise (BEC), and advanced malware campaigns
• Promote a security-first mindset and contribute to a culture of continuous improvement and operational excellence