Information Security Engineer

Information Security Engineer at HPI

Do you envision working for a company that has the expertise of a long-standing industry leader, but the spirit of an entrepreneur? Does the thought of making a real impact motivate and energize you? If so, HPI is the place for you. Join a team that values integrity, flexibility, loyalty, compassion and dedication—we can’t wait to meet you.

HPI is unique.

A respected industry leader that’s been serving customers for over 44 years, we’re known for our innovation and adaptability. Our experience has given us our expertise, but our forward-thinking, entrepreneurial spirit has given us our strong reputation. As a third-party administrator, we offer a suite of health and benefit solutions to employers. By joining HPI, you’ll contribute to ideas that make a real difference for employers and employees nationwide.

There isn’t a challenge we won’t accept and we’re looking for people who have a passion to take it on. Not just a job—a mission.

Our commitment extends beyond our clients to our own employees. We foster a supportive and inclusive work environment where innovation thrives. By investing in our team’s growth and well-being, we ensure they are equipped to provide exceptional service.

The Security Engineer reports directly to the Chief Information Security Officer (CISO) and is responsible for the design, implementation, administration, and continuous improvement of enterprise cybersecurity technologies and controls. This role serves as a key technical contributor supporting security operations, endpoint protection, cloud security, identity management, vulnerability management, data protection, and regulatory compliance initiatives.

The Security Engineer works closely with Information Services, Infrastructure, Applications, Privacy, business stakeholders, end users, and external vendors to identify and reduce cybersecurity risk while supporting organizational objectives and regulatory requirements. The position requires a hands‑on cybersecurity professional capable of balancing operational responsibilities with strategic security initiatives.

• Administer, maintain, monitor, and optimize enterprise cybersecurity platforms, including Crowd Strike, Microsoft security technologies, Zscaler, Varonis, vulnerability management tools, and other approved security solutions.
• Monitor platform health, investigate control failures, and ensure security technologies operate effectively and in accordance with approved standards.
• Maintain security configurations, documentation, dashboards, reporting, and operational procedures.

• Investigate security alerts, suspicious activity, and potential cybersecurity incidents.
• Support incident response activities, including identification, analysis, containment, eradication, recovery, documentation, and root cause analysis.
• Develop and maintain detection logic, response procedures, and security playbooks.

• Assist in securing Microsoft 365, Azure, Microsoft Entra , Intune, and hybrid technology environments.
• Review cloud and identity configurations and recommend improvements that reduce risk and support Zero Trust principles.
• Implement and maintain security baselines, identity protections, Conditional Access controls, privileged access safeguards, and configuration standards.

• Perform or support vulnerability assessments and coordinate remediation activities with technology owners.
• Validate remediation, track risk reduction, and escalate aging or high‑risk vulnerabilities as appropriate.

• Assist with…