Senior Information Security Engineer

Overview

We are looking for a hands‑on, highly technical Senior Information Security Engineer to design, implement, and maintain our core cybersecurity infrastructure. Serving as a primary technical expert, you will translate high‑level security policies into robust system configurations, lead proactive threat detection, and engineer advanced defenses across our cloud, network, and endpoint environments.

• SIEM & SOAR Engineering:
  Configure log ingestion pipelines, write advanced detection queries, analyze system telemetry, and build automated incident response workflows.
• Policy Technical Enforcement:
  Directly translate enterprise Information Security Policies into concrete technical controls, including conditional access matrices, complex firewall rule sets, and secure system baselines.
• Data Loss Prevention (DLP) Deployment:
  Implement, tune, and monitor technical DLP rules to detect, alert on, and block the unauthorized exfiltration of sensitive organizational data.
• Endpoint Detection & Response (EDR) Administration:
  Deploy and manage global endpoint agents, optimize behavioral alerting thresholds, and execute rapid containment protocols during active threats.
• Vulnerability Management & Internal Pentesting:
  Execute credentialed infrastructure and application scans, filter false positives, and coordinate patch validations. Conduct targeted internal penetration testing and exploit validation using standard offensive security suites.
• Network Security Mastery:
  Analyze, configure, and troubleshoot network traffic across Layers 2 through 7 to enforce uncompromised perimeter defense and internal micro‑segmentation.
• Secure Access & Tunneling:
  Build, harden, and support secure remote access architectures, managing enterprise IPsec / SSL VPN gateways, certificate life cycles, and MFA integrations.
• Technical Mentorship:
  Act as the primary technical escalation point for IT operations and mentor junior administrators on secure engineering principles and alert triage.

• This is a full‑time, office‑based position in a modern, cozy environment in our Troy, MI office.
• Our standard working hours are Monday to Friday, 9:00 AM to 6:00 PM, promoting a healthy work‑life balance.

• Experience:
  
  5+ years of dedicated, hands‑on experience in cybersecurity engineering, network defense, or security systems administration.
• Systems Proficiency:
  Deep hands‑on expertise configuring market‑leading SIEM/SOAR platforms, EDR consoles, Data Governance/DLP modules, and enterprise vulnerability scanners.
• Networking & Offensive
  
  Skills:
  
  Thorough technical understanding of the OSI model, secure tunneling protocols, and practical experience utilizing industry‑standard penetration testing tools to audit internal defenses.
• Certifications:
  
  Technical certifications such as CISSP, CASP+, advanced vendor‑specific engineering credentials, or relevant offensive security certifications are strongly preferred.

• Company culture that values inclusivity and support.
• Defined paid training and clear pathways for career development.
• Comprehensive benefits package including PTO, sick days, paid volunteer hours, medical, dental, vision insurance, and 401(k).

We are an equal‑opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sexual orientation, age, marital status, veteran status, or disability status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.