IT Security Engineer

The IT Security Engineer is responsible for ensuring the confidentiality, integrity, and availability of an organization’s information systems and data. This role involves designing, implementing, and

maintaining security measures to protect against cyber threats, vulnerabilities, and data breaches. The IT Security Engineer will work closely with other IT teams to deploy/maintain security technologies, monitor network activity, and respond to security incidents.

Duties and Responsibilities include but are not limited to the following:

• Design and implement security architectures, policies, and procedures to protect company
• networks, systems, and data.
• Manage and configure firewalls, intrusion detection/prevention systems (IDS/IPS), and other
• network security technologies.
• Implement and manage Virtual Private Networks (VPNs), Secure Sockets Layer (SSL), and other
• Deploy and maintain endpoint protection software (antivirus, endpoint detection and response - EDR, etc.).
• Monitor and enforce security controls across servers, workstations, mobile devices, and other endpoints.
• Perform regular vulnerability assessments and patch management to ensure endpoint security is up to date.

• Monitor and analyze security alerts using Security Information and Event Management (SIEM) tools, leveraging AI-driven threat detection and automated log correlation.
• Investigate and respond to security incidents, utilizing automated incident response playbooks and AI tools to accelerate containment, mitigation, and recovery.
• Conduct post-incident analysis, prepare incident reports, and implement corrective actions to prevent recurrence.

• Enforce and monitor adherence to company AI Acceptable Use Policies and security guidelines across all enterprise tools and workflows.
• Assess and review third-party AI tools, plugins, and agents for security, data privacy, and compliance before organizational adoption.
• Implement and maintain safeguards to prevent unauthorized exposure of sensitive data, PII, and trade
• secrets in AI prompts and contexts.
• Deploy and manage AI security automation to continuously defend IT systems and accelerate threat mitigation.

• Regularly conduct vulnerability assessments and penetration testing on internal/external systems, including AI models, agents, and RAG pipelines.
• Collaborate with development teams to fix vulnerabilities and weaknesses in applications, systems, and infrastructure.
• Maintain an up-to-date inventory of vulnerabilities and ensure timely remediation.

• Design and implement strong identity and access management (IAM) solutions for human users and non-human/AI agent identities.
• authentication, authorization, and role-based access controls (RBAC).
• Enforce multi-factor authentication (MFA) and least privilege access across all platforms.
• Manage privileged access and ensure secure management of credentials.

• Ensure the encryption of sensitive data both at rest and in transit.
• Develop and implement data loss prevention (DLP) policies and monitor for potential data exfiltration risks.
• Assist with compliance initiatives and relevant data protection regulations.

• Conduct regular security audits to ensure compliance with industry standards, AI governance frameworks (e.g., NIST AI RMF), and internal policies.
• Prepare for and support external audits and certifications.
• Develop and maintain documentation for security policies, procedures, and best practices.

• Conduct security awareness training for employees to promote a security-conscious culture.
• Provide…