Information Security Engineer

The Information Security Engineer serves as the senior technical cybersecurity resource responsible for designing, implementing, maintaining, and continuously improving the organization's cybersecurity architecture, security operations, and security controls. This role provides technical leadership for Microsoft 365 E5 security services, end point protection, email security, security awareness, vulnerability management, incident response, HIPAA compliance initiatives, and secure AI adoption.

Essential functions are the basic job duties that an employee must be able to perform, with or without reasonable accommodation. The list of essential functions, as outlined herein, is intended to be representative of the tasks performed within this classification. The omission of a function does not preclude management from assigning essential duties not listed herein if such duties relate to the position.

• Design, implement, and maintain enterprise security controls across cloud and on-premises environments.
• Develop and maintain security architecture standards aligned with industry frameworks including NIST Cybersecurity Framework, CIS Controls, and HIPAA Security Rule requirements.
• Evaluate and recommend security technologies, tools, and controls to strengthen organizational cybersecurity posture.
• Lead technical security projects from planning through implementation and operational support.
• Serve as the technical lead for Microsoft 365 and other Cloud Security applications.
• Act as technical owner of the vulnerability management program by leading efforts to reduce the organizational risk exposure through proactive remediation initiatives.
• Support cybersecurity incident investigations and response activities, including but not limited to performing advanced threat hunting, security analysis, and root cause analysis.
• Develop and maintain incident response procedures and playbooks.
• Support security awareness initiatives, providing threat expertise, analyzing phishing campaigns, and recommending improvements to strengthen organizational security culture.
• Support HIPAA, HITECH, and regulatory compliance by participating in risk assessments and audits, assisting with policy and technical standards development, and maintaining required security controls, evidence, procedures, and documentation.
• Serve as the senior cybersecurity technical resource by mentoring analysts, collaborating on secure infrastructure solutions, supporting strategic cybersecurity planning, presenting business-friendly recommendations to leadership, and escalating complex security issues.
• Performs other related duties as required.

• Bachelor’s degree in Computer Science, Business Administration, Information Systems, or related field or 4 years of experience in the Information Technology field in roles such as System/Network Administration, IT Analyst, Software Development, Risk Analyst, or Security Intelligence.
• Three (3) years or more of related work experience in an IT/Security role.
• Familiarity with security frameworks and standards (NIST, CIS Controls, ISO 27001).
• Exposure to cloud environments (AWS, Azure, or GCP) and their native security controls.

• Any one of the following:
  CompTIA Security+, ISC2 Security Certified Practitioner (SSCP), GIAC Security Essentials

• Must maintain a valid driver’s license and automobile insurance coverage, be able to travel as needed, and be able to meet on a consistent basis the driving record requirements of the Company’s auto insurance carrier if you drive your vehicle during company business.
• Must maintain required credentials and mandatory training requirements to…