Information Security Engineer

Great benefits. Competitive pay. We know these are some of the things people look for in a job. If you’re the kind of person who believes that honoring and empowering our nation’s veterans is more than just a cause — that it’s a calling — then we’re ready to meet you. When you join Wounded Warrior Project® (WWP), you’re committing to making a difference.

We make a commitment to you, too – helping you to find that spark, ignite your passion to serve, and embark on a career with meaning and purpose. At WWP™, we recognize our mission cannot be accomplished without our talented teammates, which is why we’re proud to offer benefits such as:

• A flexible hybrid work schedule (three days in the office, two days’ work from home)
• Full medical, dental, and vision coverage for both teammates AND family members
• Competitive pay and performance incentives
• A fun, mission-focused, and collaborative team environment

The Wounded Warrior Project (WWP) Information Security Engineer serves as a subject matter expert responsible for designing, implementing, and maintaining security controls that protect WWP’s systems, identities, applications, cloud services, and information assets. This role partners with business and technology teams to advance cybersecurity capabilities across identity and access management, data protection, cloud security, application security, security operations, and emerging technology governance.

The Information Security Engineer evaluates and implements security solutions, promotes security best practices, and helps strengthen WWP’s overall security posture.

• Develop, implement, and maintain security strategies, platforms, and overall security architecture.
• Design, implement, administer, and continuously improve enterprise security technologies and controls.
• Serve as a security subject matter expert for the organization and third-party vendors.
• Design and administer identity and access management controls, including authentication, authorization, access governance, and privileged access management processes.
• Support security architecture reviews and risk assessments for cloud platforms, software-as-a-service (SaaS) solutions, and third-party technologies.
• Partner with application owners and technology teams to integrate security requirements into software acquisition, development, and implementation processes.
• Configure and monitor security information and event management (SIEM) platforms.
• Perform vulnerability scans, risk analyses, and security assessments, and lead remediation efforts.
• Evaluate emerging technologies, including artificial intelligence and automation platforms, and help develop appropriate security controls and governance practices.
• Support information protection, data classification, data retention, and security governance initiatives.
• Define, measure, and report on security metrics and performance indicators.
• Provide technical guidance and mentorship to security analysts and other IT teammates.
• Conduct research and remain current on emerging security threats, trends, vulnerabilities, and best practices.
• Participate in incident response, threat investigations, and remediation activities while partnering with security operations personnel to improve detection and response capabilities.
• Evaluate new technologies and processes that enhance security capabilities and operational effectiveness.
• Design and maintain controls that support data protection, information governance, encryption, and secure data-handling practices.
• Analyze existing security controls and recommend improvements to strengthen WWP’s security posture.
• Participate in the evaluation, selection, and implementation of technology solutions.
• Prepare and maintain security documentation, including…