Information Security Engineer Job Foxborough area,Massachusetts USA,IT/Tech

Overview

The Information Security Engineer is responsible for implementing and supporting security technologies and controls that protect the organization's IT infrastructure, systems, and data. This role contributes to deploying, operating, and maintaining security solutions and supports security strategies, compliance requirements, and risk mitigation across the enterprise. The position provides technical expertise to security operations and security engineering initiatives and supports Kraft Group companies and locations.

DUTIES

AND RESPONSIBILITIES

Design, deploy, and manage security solutions in alignment with security policies and business needs.

Assist in conducting risk assessments, security reviews, and gap analyses for compliance with standards such as NIST, CIS, ISO 27001, HIPAA, and GDPR.

Participate in vulnerability management lifecycle—monitoring alerts, identifying risks, and implementing remediation activities.

Manage and operate enterprise security tools including Tenable, Crowd Strike, NG-SIEM, Cisco Fire Power, Net Spi, Cyber Ark, and Zscaler.

Assist with firewall rule reviews, applying least privilege and zero-trust principles, and managing change workflows.

Administer and enhance Privileged Access Management (PAM) solutions, including implementing Just-In-Time (JIT) access, credential rotation, session monitoring, and least-privilege controls using Cyber Ark or similar technologies.

Respond to security incidents, performing triage, containment, documentation, and escalation in coordination with senior team members.

Analyze security event logs and correlate data to identify threats and recommend improvements based on threat intelligence.

Support penetration testing efforts by collaborating with third-party testers, reviewing findings, and assisting in remediation.

Contribute to user awareness programs by promoting security best practices and supporting education initiatives across the organization.

Collaborate with IT teams to guide and influence security best practices in operations, infrastructure, and application development.

Assist in internal and external audit activities, including documenting controls, tracking exceptions, and managing remediation plans.

Create and maintain security dashboards and reports to communicate trends, vulnerabilities, and risk metrics to leadership.

Stay informed of evolving security threats, technologies, and industry developments to improve security measures.

Work with IT and development teams to ensure security is integrated into design and implementation processes.

Special projects and assignments as business dictates.

Responsible for the creation, maintenance and control of all personally identifiable information or any other information protected by Confidentiality and Privacy Standards as per regulations.

SUPERVISORY RESPONSIBILITIES

This position has no supervisory responsibilities.

SKILLS AND QUALIFICATIONS

Bachelor's degree in Cybersecurity, Computer Science, or Information Systems preferred.
4-6 years of experience in cybersecurity architecture, security engineering, or related fields, with a track record of implementing security solutions.
Strong understanding of Defense-in-Depth, Zero-Trust Security Models, and Compensating Controls.
Experience in security design and implementation for Enterprise Platforms and Operating Systems (Windows, Unix/Linux).
Familiarity with network security concepts, firewalls, and enterprise security controls (Cisco iOS & NX-OS, Aruba OS, Extreme XOS).
Experience with Enterprise NGFW platforms (Cisco FTD) and advanced threat detection tools.
Familiarity with regulatory compliance frameworks such as CIS, CISA, NIST, ISO 27001, ISO 27002, HIPAA, GDPR.
Ability to support cross-functional security projects and provide security guidance to IT teams.
Strong analytical and problem-solving skills with a focus on security risk mitigation.
Strong communication and documentation skills for reporting security risks and solutions to stakeholders.

PHYSICAL DEMANDS

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

WORK ENVIRONMENT

Participate in after-hours on-call escalations and in Stadium event coverage rotations.
The noise level in the work environment is usually moderate.
Fast-paced office environment.

CERTIFICATES, LICENSES, REGISTRATIONS

Certified Information Systems Security Professional (CISSP) or similar certifications preferred.

OTHER DUTIES

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

This company is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

#LI-KG

#J-18808-Ljbffr


Increase/decrease your Search Radius (miles)



Job Posting Language