<p>We're looking for an Information Security Engineer to join our core security team helping deliver on security initiatives, audits & compliance, and infrastructure security & integrity.</p> <p>Core Responsibilities</p> <p>Security Operations & Implementation</p> <ul> <li>Evaluate, test, deploy and maintain security software and tools </li><li>Develop, execute, and track the performance of security measures to protect information, network infrastructure, and computer systems </li><li>Perform and document cybersecurity, vulnerability, and risk assessments and implement remediation plans </li><li>Research security vulnerabilities and implement countermeasures </li></ul> <p>Strategy & Planning</p> <ul> <li>Gather, analyze, and document security requirements for systems and applications </li><li>Assist with developing security standards and best practices for the organization </li><li>Recommend security solutions to management </li><li>Develop cost-effective solutions to cybersecurity challenges </li></ul> <p>Governance & Compliance</p> <ul> <li>Create comprehensive security reports and analysis for stakeholders </li><li>Assist with internal compliance activities such as maintaining security certifications, driving access reviews, disaster recovery testing, pen test. </li><li>Assist with external compliance requests such as responding to security questionnaires, responding to security RFPs. </li></ul> <p>Training & Communication</p> <ul> <li>Educate and train staff in information security best practices </li><li>Communicate security requirements and recommendations across the organization </li><li>Collaborate with external security vendors to deliver projects, resolve issues, negotiate on requirements. </li></ul> <p>Minimum Experience / Qualifications</p> <ul> <li>Bachelor's Degree in Information Security, Computer Science, or related field. </li><li>1-3 years of experience in areas of cybersecurity or related field. </li><li>Experience with cybersecurity frameworks (SOC 2, ISO 27001, NIST, GDPR). </li></ul> <p>Preferred Experience / Qualifications</p> <ul> <li>5+ years of experience in areas of cybersecurity or related field. </li><li>Professional certification such as CISSP, CISM, or CISA. </li><li>Expertise in application security, including secure SDLC, SAST/DAST, and code review </li><li>Expertise in network security, cryptography, and identity management </li><li>Excellent understanding of technology infrastructures using Firewalls, VPN, Data Loss Prevention, and IDS/IPS </li><li>Proficiency in at least one programming or scripting language (Python, Bash, Java, etc.) </li><li>Ability to plan and deliver multi-week projects, including reporting status and reacting to changes of requirements. </li><li>Experience in SaaS, Telecom, or in a regulated industry. </li></ul> <p>Desired Skills, Competencies and Characteristics</p> <ul> <li>Passion: Strong internal motivation to deliver and develop in area of cybersecurity. </li><li>Attention to Detail: Ability to consistently execute tasks with accuracy and thoroughness. </li><li>Analytical Thinking: Capacity to evaluate complex scenarios and identify effective solutions. </li><li>Collaboration: Ability to effectively partner and communicate across teams and departments. </li><li>Adaptability: Flexibility to adjust quickly to changing priorities and evolving threats. </li><li>Integrity: Unwavering commitment to ethical conduct, confidentiality, and reliability. </li><li>Flexibility: Ability to accommodate occasional out of hours work to hit customer deadlines or respond to security incidents. </li></ul>