Information Security Engineer

Job Details:

Job Description:

The Cyber Defense organization is seeking an Information Security Engineer to support comprehensive offensive and defensive security operations across multiple enterprise environments. You will join a highly collaborative Agile Dev Ops delivery team of information security professionals responsible for proactively identifying/remediating vulnerabilities, conducting threat assessments, and implementing robust security measures to protect Intel's critical assets, systems, and applications.

The Cyber Defense team manages security controls spanning vulnerability scanning, security patching, penetration testing, application security, cloud security, and lab security across all Intel domains. Our offensive security operations include thorough security assessments of enterprise-connected assets including physical hosts, network devices, applications, virtual machines, cloud infrastructure, and social engineering vectors.

This role requires a passion for quality, security, automation, and the skills to understand complex systems with a desire for continual improvement and innovation. You will join a Dev Ops team of Information Security professionals responsible for developing, configuring, and operating security controls.

This includes security controls validation, discovery, offensive security, attack detection and containment, vulnerability detection and remediation, development of AI models and agentic systems that respond to AI generated attack paths.

As an Information Security Engineer your responsibilities will be, but not limited to:

Configuration, management, and operations of core platforms within the Cyber Defense organization (e.g. vulnerability/application scanning, security patching, asset discovery/identification, exposure management, etc.).Perform external attack surface management responsibilities such as, attack path analysis, exposure exploitability analysis, and tactical remediation and containment of high-risk exposures

Verify efficacy of security controls implemented on a variety of Intel enterprise systems, infrastructure, and applications.

Recommend remediation actions to discovered security vulnerabilities and weaknesses.

Evaluate threat intelligence and determine potential risk to Intel.

Understand and emulate adversary Tactics, Techniques, and Procedures in assessing the security posture of a wide range of systems.

Work closely with software development engineers, system engineers, and other information security teams in supporting information security projects and initiatives.

Develop and support security solutions that integrate and interface with customers/business units.

Produce quality reporting documentation, tailoring the relative detail of the content to the  a team player within the functional team, and across other Intel teams and stakeholders.

Support vulnerability assessments of AI systems by running scans, documenting findings, and helping track remediation of identified issues in models and datasets.

Collaborate with cross-functional teams to understand AI workflows and identify potential security gaps.

Help develop defensive and / or offensive AI agents / to respond to or emulate AI assisted attackers.

Support and work in an Agile and Dev Ops team focused on security operations, analytics, and solution development.

The ideal candidate should show the following behavioral traits:

Strong communication and coordination skills across multiple stakeholder groups.

Demonstrated results leveraging perseverance, patience, persistence, problem-solving, vulnerability hunting, and the willingness to work well with ambiguity.

A collaborative team player with a good attitude, trustworthy, knows when to push and when to stop, and understands the potential downstream impacts of technical actions.

Qualifications:

Minimum qualifications are required to be initially considered for this position

Bachelor's degree in Computer Engineering, Computer Science, Information Technology, Information Security, or any other science/engineering related field.
5+ years of experience supporting Information Security operations, vulnerability management, and/or service delivery.

Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.

Experience in Offensive Security and Vulnerability Management including Vulnerability Assessment, Identification, and Remediation.

Server/system architectures, operating systems, system patching, system and security configuration, auditing, and automation.

Windows and Linux administration (i.e., installation, configuration, and troubleshooting).Experience in adversary emulation, network penetration testing, web application penetration testing, and cloud penetration testing (e.g. Azure, GCP, AWS).Practical experience with Windows, Power Shell, Active Directory, EntraID (Azure Active Directory), Linux OS (various flavors), networking, scripting/coding (Python, C#, Ruby, JavaScript, BASH, Go, etc.), cloud…