Information Security Engineer

What You’ll Do

As an Info Sec Engineer, you’ll own a security domain as an SME, implement controls, automate processes, ensure compliance, and resolve incidents to reduce risk. As an Information Security Engineer, you'll be assigned a security domain such as cloud security, data protection, security automation, endpoint security, or requirements verification and will maintain and improve the associated systems, processes, and standards to manage and reduce risk to the organization.

You'll also serve as the subject matter expert for your assigned domain and leverage your experience with it to influence security policies and practices. You will implement security platforms and/or controls and automate security processes. You will also resolve issues such as build automation to resolve compliance findings and maintain and restore critical systems and you'll assist with critical issues such as incidents occurring across multiple security systems.

This role will be filled following our hybrid work model at our Stevens Point, WI offices. This role is NOT available for remote work. Sentry does not offer employment in this position to holders of F-1, J-1, and H-1 Visas for the purpose of obtaining practical experience.

• Review the maturity and effectiveness of multiple security platforms ensuring proper performance, availability and capacity management.
• Conduct monitoring through automated functional and performance testing, investigate potential problems and determine solutions, as necessary, to avoid service interruptions.
• Recommend and implement new features and functions within platforms to streamline processes and enable continuous deployment of new capabilities.
• Provide moderate to complex technical maintenance services and oversee implementation of patches to integrated security systems and solutions ensuring continuous availability and operation. This includes evaluating functionality, overseeing and conducting testing, overseeing virus management, and providing recommendations and maintaining information security policies, procedures and systems.
• Conduct audits and code testing to identify data security vulnerabilities and undertake necessary actions to eliminate identified threats.
• Implement architectural changes when intrusions occur and monitor effectiveness of implemented changes.
• Create reports to summarize findings to management.
• Ensure security plans, controls, processes, standards, policies and procedures are aligned with overall information standards.
• Identify security risks and exposures, determine the causes of security violations and suggest procedures to halt future incidents and improve security.
• Communicate, implement, enforce and monitor security controls to protect the organization’s technology assets from intentional or inadvertent modification, disclosure or destruction.
• Provides training, informational and educational materials to support technology users.

• Contribute to and lead team discussions and proactively engage around security topics such as emerging technology, data protection strategies, and secure process enhancement to allow the team to make intelligent and secure project decisions.
• Collaborate within Information Security to contribute expertise in relevant domains during security events and project decision meetings and actively learn security domains outside their core domain.
• Maintain a working knowledge of security trends and adapts these trends to the organization’s environment by building proactive detections, defenses, and processes.
• Participate in on‑call rotations to provide 24/7 support for critical systems and capabilities.
• Participate in developing and adoption of security best practices within the information security…