Information Security Engineer

This range is provided by firstPRO, Inc. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$145,000.00 / yr - $160,000.00 / yr

Additional compensation types

Annual Bonus

The Senior Information Security Engineer will serve as a trusted security leader and subject matter expert, partnering closely with the Information Security Manager to advance the firm’s cybersecurity strategy, architecture, and operations. This role will take ownership of critical security initiatives, lead the design and enhancement of security programs, and guide cross‑functional teams in implementing secure, resilient, and compliant solutions. The Senior Information Security Engineer will be responsible for architecting and managing enterprise security tools, leading incident response efforts, ensuring robust cloud security, and proactively addressing emerging threats. This position requires a deep understanding of both the firm’s business objectives and the evolving cybersecurity landscape, ensuring that security solutions are business‑enabling, scalable, and aligned with industry best practices.

Essential Job Functions and Responsibilities

• Architect and oversee enterprise identity governance initiatives and the Privileged Access Management (PAM) platform, ensuring access control frameworks meet regulatory and business requirements.
• Serve as a principal advisor to IT and business leaders on balancing business needs with security best practices in technology adoption and process design.
• Lead advanced incident response activities, including root cause analysis, threat hunting, containment, and post‑incident improvement plans.
• Lead the design, implementation, and optimization of Data Loss Prevention (DLP) solutions and related controls to safeguard sensitive data and prevent breaches.
• Define and enforce robust cloud security strategies, including Netskope and other zero trust / SASE solutions.
• Drive the maturity of the identity and access management program across cloud services, high‑performance computing environments, and hybrid infrastructures.
• Provide senior‑level oversight of information security tools and operations, including SIEM platforms, EDR solutions, and advanced malware defense.
• Represent Information Security in enterprise architecture and technical project reviews, guiding secure design and implementation decisions.
• Lead investigations into phishing campaigns, targeted threats, and complex security incidents, providing actionable intelligence to stakeholders.
• Conduct continuous threat landscape assessments, recommending both tactical mitigations and strategic security investments.
• Participate in the vulnerability management lifecycle, from pre‑deployment risk assessment to remediation validation and compliance reporting.
• Guide the ongoing development of the Information Security Management System (ISMS) and related governance processes.
• Mentor and coach junior security engineers, fostering skill growth and a proactive security culture across the organization.
• Partner with business stakeholders to elevate security training, awareness programs, and process improvements.
• Establish and refine advanced technical security controls to ensure visibility, rapid incident response, and adherence to compliance frameworks.
• Participate in rotational on‑call responsibilities to support the firm and respond to critical security events and incidents.

Qualifications

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Industries

Staffing and Recruiting

#J-18808-Ljbffr