Senior Information Engineer

Responsibilities

• Design, implement, and maintain security controls for SOC 2 Type II, ISO/IEC 27001, ISO/IEC 42001, CSA STAR Level 2, and CyberEssentials+ standards
• Oversee enterprise Identity and Access Management (IAM) programs, including RBAC, PAM, and access governance
• Manage secure authentication systems including MFA and SSO
• Implement malware protection solutions, EDR, and XDR platforms
• Design and enforce data loss prevention (DLP) strategies across email, endpoints, and cloud
• Lead technical vulnerability management, including scanning, assessment, and remediation
• Architect and implement cloud security controls across GCP and Azure
• Collaborate with CISO and external auditors on security assessments and certifications
• Provide technical leadership and mentorship to the security team

Requirements

• Bachelor's degree in Computer Science, Information Security, or related field
• 7-10 years of experience in IT or information security
• Minimum 3 years in a leadership role
• Hands-on experience implementing security controls in enterprise environments
• Deep understanding of NIST CSF, CIS Controls, and MITRE ATT&CK
• Proficiency in scripting and automation (Python, PowerShell, Bash, or Terraform)
• Knowledge of AI/ML security, zero-trust architecture, and DevSecOps
• Fluency in English

Benefits

• Competitive Health, Dental and Vision Insurance
• Pet Insurance
• 401k
• Flexible schedule
• Paid Holidays plus Paid Time Off