Information Security Engineer III

This role focuses on designing secure architectures and developing security approaches to protect ICW Group’s cloud, data, and AI-driven environments. You will partner with engineering teams to embed security from design through production while supporting vulnerability management, threat detection, and incident response.

As a senior technical contributor in information security engineering, you will monitor environments for threats, investigate incidents, produce risk-focused findings, and guide security design reviews for systems involving data, analytics, and AI. The position is based in San Diego, CA and is onsite
.

• Monitor cloud, on-prem, and SaaS environments for security threats using SIEM
  , EDR
  , cloud-native logging, and network telemetry.
• Support security incident response activities, including investigation, containment, remediation, and post-incident analysis.
• Research and implement methods to remediate network and application security vulnerabilities.
• Lead and participate in security architecture controls reporting, compliance audits, and risk-focused reporting, including internal and third-party risk assessments.
• Produce risk-focused security findings and communicate them clearly to technical and non-technical stakeholders.
• Conduct threat hunting and root-cause analysis to identify anomalous behavior, exploitation attempts, and indicators of compromise.
• Investigate potential data misuse, data exfiltration, and anomalous access patterns using logs,
  DLP
  , and monitoring tools.
• Prepare and analyze system security reports by collecting, analyzing, and summarizing data and trends, and provide recommendations to improve security.
• Serve as a senior technical contributor across cloud security, including IAM
  , logging, monitoring, detection, and secure deployment patterns.
• Lead or contribute to vulnerability management across cloud infrastructure, applications, containers, and data platforms.
• Participate in offensive and defensive security activities, including threat modeling, red team exercises, blue team detection improvements, and threat hunting.
• Support incident response investigations involving cloud misconfigurations, data exposure, and/or AI-related security events.
• Perform security architecture reviews and provide guidance to engineering teams to reduce risk while enabling business objectives.
• Implement and improve security controls that strengthen ICW’s overall security posture while supporting modern cloud and data initiatives.
• Partner with Engineering, Infrastructure, Cloud, Data, and Operations teams to embed security into system design and delivery.
• Lead security reviews for new data, analytics, and/or AI initiatives, including architecture reviews and risk assessments prior to production deployment.
• Create and maintain technical security standards and guardrails for data protection, cloud usage, and/or AI security.
• Partner with internal teams to remediate security findings and track remediation through closure.
• Provide security guidance that balances risk reduction with delivery speed and business priorities.
• Execute technical and process changes required to adopt, maintain, and adjust Info Sec controls aligned with industry best practices.
• Act as a trusted security advisor to project teams regarding risk, controls, and secure design patterns.
• Coach and mentor engineers on secure development, data handling, and cloud security best practices.
• Work with project management and internal stakeholders to define and implement secure, scalable solutions.
• Design and implement security controls to protect sensitive insurance data across AWS data platforms, analytics pipelines, and AI/ML workloads.
• Provide security oversight for AI and LLM use cases, including model access…