information security engineer

Deepwatch

<div><div>Come join Deepwatch's team of world-class cybersecurity professionals and the brightest minds in the industry. If you're ready to challenge yourself with work that matters, then this is the place for you. We're redefining cybersecurity as one of the fastest growing companies in the U.S. &ndash; and we have a blast doing it!

Who We Are

Deepwatch is the leader in managed security services, protecting organizations from ever-increasing cyber threats 24/7/365. Powered by Deepwatch's cloud-based security operations platform, Deepwatch provides the industry's fastest, most comprehensive detection and automated response to cyber threats together with tailored guidance from dedicated experts to mitigate risk and measurably improve security posture. Hundreds of organizations, from Fortune 100 to mid-sized enterprises, trust Deepwatch to protect their business.

Our core values drive everything we do at Deepwatch, including our approach to tackling tough cyber challenges. We seek out tenacious individuals who are passionate about solving complex problems and protecting our customers. At Deepwatch, every decision, process, and hire is made with a focus on improving our cybersecurity solutions and delivering an exceptional experience for our customers. By embracing our values, we create a culture of excellence that is dedicated to empowering our team members to explore their potential, expand their skill sets, and achieve their career aspirations, which is supported by our unique annual professional development benefit.

Deepwatch recognition includes:
<ul>
<li>2025, 2024, 2023, 2022 and 2021 Great Place to Work&reg; Certified</li>
<li>2024 Military Times Best for Vets Employers</li>
<li>2024 US Department of Labor Hire Vets Gold Award</li>
<li>2024 Forbes' America's Best Startup Employers</li>
<li>2024 Cyber Defense Magazine, Global Infosec Awards</li>
<li>2023 and 2022 Fortress Cybersecurity Award</li>
<li>2023 $180M Series C investment from Springcoast Capital Partners, Splunk Ventures, and Vista Credit Partners of Vista Equity Partners</li>
<li>2022 Cybersecurity Excellence Award for MDR</li>
</ul></div>
Senior Information Security Engineer

Hybrid Tampa, FL

We are seeking a senior-level, high-impact Information Security Engineer to help scale and mature a modern, cloud-first security program.This is not a narrow or siloed role. You will operate across cloud security, vulnerability management, automation, compliance, and workforce security. You will report directly to the CISO and have visibility into&mdash;and influence over&mdash;the organization's entire security posture.

Our environment is AWS and SaaS-centric, supporting a modern, macOS-heavy workforce. We are looking for someone who thrives in ownership, moves decisively, and understands how to balance security rigor with business velocity.

This role is for a builder, operator, and problem-solver.

What You'll Do:
<ul>
<li>Own end-to-end security operations: monitoring, investigation, and response across AWS, SaaS, and endpoint environments.</li>
<li>Lead incident response from triage to root cause and executive reporting.</li>
<li>Design and refine operational playbooks.</li>
<li>Secure AWS using Wiz and native controls, proactively addressing misconfigurations and identity risks.</li>
<li>Continuously assess cloud posture and drive remediation with Cloud Engineering, embedding secure-by-design principles.</li>
<li>Own the vulnerability management lifecycle (Tenable), translating data into business risk decisions and driving architectural improvements.</li>
<li>Manage and optimize endpoint detection and response (CrowdStrike).</li>
<li>Oversee identity and access control validation, including quarterly reviews and least-privilege enforcement.</li>
<li>Lead phishing simulations and security awareness.</li>
<li>Build automation and response workflows with Torq to accelerate remediation.</li>
<li>Continuously evaluate and optimize the security stack; identify bottlenecks and engineer scalable solutions.</li>
<li>Maintain and mature compliance (ISO 27001, SOC 2, PCI-DSS) using Drata for continuous monitoring and audit readiness.</li>
<li>Conduct control testing (CIS Benchmarks, MITRE ATT&amp;CK).</li>
<li>Support risk assessments and security evaluations.</li>
<li>Act as a security advisor to IT, Engineering, and business leadership, providing risk-informed guidance and helping shape the security program roadmap.</li>
</ul>
What You Bring:
<ul>
<li>5+ years of progressive experience in Information Security, Cloud Security, or Security Operations.</li>
<li>Strong hands-on experience with modern security tooling, including Splunk, Wiz, Tenable, CrowdStrike, Torq, and Drata.</li>
<li>Proven experience securing AWS and SaaS-based environments.</li>
<li>Experience operating within regulated environments (ISO 27001, SOC 2, PCI-DSS).</li>
<li>Familiarity with CIS Benchmarks, MITRE ATT&amp;CK, and modern security architecture principles.</li>
<li>Ability to independently prioritize, execute, and drive outcomes across multiple domains.</li>
<li>Clear communication skills with the ability to translate technical risk to business stakeholders.</li>
<li>High integrity, strong ownership mindset, and a bias toward action.</li>
</ul>
Certifications such as CISSP, CCSP, Security+, AWS Security Specialty, or similar are a plus but not required.

Why This Role:This is a high-visibility role with direct executive exposure and meaningful influence. You will not be confined to a single domain &mdash; you will operate across the full security spectrum and directly shape how security scales with the business. If you are looking for ownership, autonomy, and the opportunity to build &mdash; not just maintain &mdash; a security program, this role offers exactly that. High visibility. High ownership. High impact.

Statutory Pay Disclosure:
<div>
The anticipated salary range for this role is $140,00 - $178,000 + stock options + benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.
</div>
ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:
<ul>
<li>A citizen of the U.S.;</li>
<li>A lawful permanent resident of the United States;</li>
<li>A person admitted to the United States as a refugee; or</li>
<li>A person that has been granted asylum by the United States government.</li>
</ul>
The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.<div><div>

What We Offer:

Deepwatch is excited to provide benefits designed to support team members and their families. Including:
<ul>
<li>Medical, dental, vision, and disability insurance</li>
<li>Flexible Time Off (FTO), 12 company holidays, sick leave and 8-Weeks Paid Parental Leave</li>
<li>Unique professional development benefits with Annual &quot;development dollars&quot; to support our people growth and development</li>
<li>Wellness contests and monthly educational programs</li>
<li>401(K) retirement program</li>
<li>Learn more here: Deepwatch Benefits</li>
</ul>
We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates, so please don't hesitate to apply &mdash; we'd love to hear from you. Please review our DEI Statement here.
<div>
Deepwatch welcomes and encourages applications from people with disabilities and accommodations are available on request for candidates taking part in all aspects of the selection process. Please inform your recruiter or contact recruiting@deepwatch.com for further information.</div>
<div></div>
<div>All Deepwatch employees are expected to:</div>
<ul><li>Be interested in and able to work remotely from a home office when not at a corporate office</li>
<li>Pass a pre-employment background check in accordance with applicable laws</li>
</ul>
Deepwatch is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, marital status, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

By submitting your application, you agree that Deepwatch may collect your personal data for recruiting, global organization planning, and related purposes. The Deepwatch Privacy Policy explains what personal information we may process, where we may process your personal information, our purposes for processing your personal information, and the rights you can exercise over Deepwatch's use of your personal information.</div></div></div>

Senior Information Security Engineer

92Techno

Are you a seasoned Security Engineer with a passion for safeguarding digital environments and defending against emerging cyber threats? We are seeking a highly skilled and motivated Senior Information Security Engineer to strengthen our security posture across multiple domains.In this role, you will design, operate, and continuously enhance the organization&rsquo;s detection, response, and security architecture. The position blends blue team operations with red team thinking, enabling proactive identification of weaknesses, improvement of detection capabilities, and effective response to advanced threats across cloud, email, endpoint, identity, and network environments.Key Responsibilities<ul><li>Collaborate closely with engineering, infrastructure, and compliance teams on security aspects of operating systems, databases, access controls, patch management, encryption, antivirus, and vulnerability management.</li></ul><ul><li>Design, build, deploy, monitor, and maintain security systems, owning assigned initiatives end-to-end.</li></ul><ul><li>Clearly communicate complex cybersecurity risks, threats, and impacts to senior management.</li></ul><ul><li>Provide architectural security guidance to infrastructure, operations, data, and network teams during implementation and production phases.</li></ul><ul><li>Build and maintain strong working relationships with management, peers, project managers, and internal stakeholders.</li></ul><ul><li>Translate threat intelligence into actionable security controls across platforms, including endpoint, email, IAM, patch management, firewalls, IPS, malware detection, and alerting systems.</li></ul>Lead high-severity incident response efforts, including in-depth investigations, malware analysis, and correlation of user activity with network traffic.<ul><li>Conduct post-incident root cause analysis from an attacker&rsquo;s perspective.</li></ul><ul><li>Perform adversary emulation and attack simulations aligned with the MITRE ATT&amp;CK framework.</li></ul><ul><li>Validate security controls by simulating red-team techniques such as credential theft, lateral movement, privilege escalation, persistence, and living-off-the-land techniques.</li></ul><ul><li>Map detections to MITRE ATT&amp;CK techniques and improve detection coverage. &bull; Partner with the SOC to identify and close detection gaps.</li></ul><ul><li>Mentor junior security engineers and SOC analysts.</li></ul><ul><li>Influence security tooling decisions and long-term security roadmap.</li></ul>The Ideal Candidate Will Have<ul><li>In-depth experience with the Microsoft 365 ecosystem, including endpoint, email, cloud security, and threat hunting.</li></ul><ul><li>Expertise in Identity and Access Management (IAM), Identity Governance, Conditional Access, IdP, PIM, JIT access, and Single Sign-On (SSO) implementations.</li></ul><ul><li>Comprehensive understanding of logging, event management, SOC operations, incident management, host isolation, and containment strategies.</li></ul><ul><li>Hands-on experience with Microsoft Sentinel automation, orchestration, data connectors, analytics rules, and Kusto Query Language (KQL).</li></ul><ul><li>Experience integrating threat intelligence feeds with SIEM platforms.</li></ul><ul><li>Strong hands-on experience with endpoint security tools such as Microsoft Defender for Endpoint (MDE), Intune, and JAMF.</li></ul><ul><li>Expertise in system hardening and Intune policy and compliance configurations. &bull; Network Detection and Response (NDR) experience (preferred).</li></ul><ul><li>Skills in network segmentation, firewall rule reviews, and packet analysis (e.g., Wireshark).</li></ul><ul><li>Familiarity with KnowBe4, including security awareness training and phishing, simulations.</li></ul><ul><li>Strong understanding of cloud security across Azure, AWS, and GCP, including assessment and remediation.</li></ul><ul><li>Expertise in email security, including Microsoft Exchange, SMTP/MAPI protocols, header analysis, and phishing detection.</li></ul><ul><li>Expertise in email security including Microsoft exchange and header analysis for Phishing, suspicious email attachment and detection of other threats.</li></ul><ul><li>Hands-on experience with vulnerability management lifecycle using industry reputable tools such Tenable, Rapid7, Qualys etc. With understanding of Common Vulnerability Scoring System (CVSS) scoring on exploitability and remediation strategies.</li></ul><ul><li>Hands-on with red-teaming tools to execute attack and breach simulations that mimic the specific threat actors to test detection and response capabilities.</li></ul><ul><li>Good reporting and debriefing skills to translate complex technical findings into actionable reports for stakeholders and collaborate with blue teams to improve defenses.</li></ul>Education &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in an IT-related discipline.</li></ul><ul><li>Minimum 5 years of experience in security engineering, SOC operations, or detection focused roles.</li></ul><ul><li>Relevant technical cybersecurity certifications are a plus</li></ul>Job Type: Full-timePay: Rs350,000.00 - Rs400,000.00 per monthWork Location: In person

Wells Fargo

<div>Wells Fargo is back in the office collaborating for fabulous outcomes! 
 
This role is a hybrid position and in three days a week in the office. 
 
There is no visa sponsorship or visa transfers for this position. 
 
About this role: 
 
Wells Fargo is seeking a Micro-segmentation Senior Information Security Engineer. 
 
We are looking for a solid security engineer with a technical foundation in firewalls and traffic segmentation. 
 
Ideal candidates would have hands on segmentation experience with Illumio and at least one of: Guardicore (Akamai), VMware NSX-T, Cisco Secure Workload, or Kubernetes-native (Calico/Cilium, NetworkPolicies) including policy simulation/shadow testing and staged rollouts. 
 
Hands-on segmentation in hybrid environments (on-prem + AWS/Azure/GCP), including Azure ASG/NSG or AWS SG patterns, and Kubernetes/Service Mesh (NetworkPolicies, mTLS, Istio/Envoy) for east-west traffic would be highly desirable. 
 
Scripting is a talent of yours and you like the challenge of building reliable automations using Python/PowerShell, Terraform/Ansible, and ServiceNow IntegrationHub with OAuth2/OIDC-secured APIs, version control (Git/GitHub), CI/CD, and policy-as-code workflows (idempotent, retry-safe). 
 
Security is top of mind for you and you are able to implement identity- and risk-aware policies by integrating CMDB labels, workload identities, and EDR/PAM context to enforce Zero Trust segmentation 
 
In this role, you will:<ul><li>
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to Micro-Segmentation</li><li>
Implement requirements and engage teams to create automation / orchestration for the enterprise's Micro-Segmentation solution</li><li>
Help identify new tools and/or features to strengthen enterprise Micro-Segmentation capabilities</li><li>
Serve as a POC for enterprise Micro-Segmentation deployment</li><li>
Implement security designs on large projects for internal clients to ensure conformity with corporate information, security policy, and standards</li><li>
Utilize subject matter knowledge in industry leading security solutions and best practices to implement components of information security.</li><li>
Collaborate and provide influence with all members of the microsegmentation team</li><li>
Define and coordinate automation strategies to integrate micro-segmentation with CMDB and user-facing portals, translating business and security requirements into actionable deliverables for development teams.</li></ul>
Required Qualifications:<ul><li>
4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education</li></ul>
Desired Qualifications:<ul><li>
Experience with Micro-Segmentation security solutions including policy management</li><li>
Experience with scripting</li><li>
Strong understanding of APIs and proficiency in working with JSON, including the ability to interpret, construct, and troubleshoot queries and payloads in support of automation and integration efforts</li><li>
Experience with one or more: Guardicore (Akamai), VMware NSX T, Cisco Secure Workload, Calico/Cilium.</li><li>
Experience with Hybrid cloud segmentation in Azure/AWS/GCP (NSG/ASG, SG/NACL, tags/labels).</li><li>
Experience with Service Mesh (Istio/Envoy), Kubernetes NetworkPolicies, OPA/Gatekeeper.</li><li>
Scripting skills such as Python/PowerShell, Terraform/Ansible, Git/GitHub, CI/CD; ServiceNow IntegrationHub.</li><li>
Telemetry (NetFlow/IPFIX/eBPF, VPC Flow Logs) and SIEM analytics (Splunk/Sentinel/Elastic; KQL/SPL).</li><li>
Understanding of NIST 800 207 Zero Trust and mapping to NIST/CIS controls.</li><li>
Experience designing policy simulation/shadow testing and staged rollouts with measurable KPIs.</li><li>
Excellent technical documentation skills</li><li>
Experience with Service Now, Jira or similar systems.</li></ul>
Job Expectations:<ul><li>
Willingness and Ability to work off hours and occasional weekends to support change activities</li><li>
Participation in on call shift</li></ul>
Posting End Date:
 
15 Mar 2026 
*Job posting may come down early due to volume of applicants.
 
 
We Value Equal Opportunity 
 
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic. 
 
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements. 
 
Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process. 
 
Applicants with Disabilities 
 
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo . 
 
Drug and Alcohol Policy 
 
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more. 
 
Wells Fargo Recruitment and Hiring Requirements: 
 
a. Third-Party recordings are prohibited unless authorized by Wells Fargo. 
 
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.</div>

Senior Information Security Engineer - Micro-segmentation

The Hanover Insurance Group

For more than 170 years, The Hanover has been committed to delivering on our promises and being there when it matters the most. We live our values every day, demonstrating we CARE through our values, Sustainability initiatives and inclusive corporate culture.
 
Our IT Security team is currently seeking a Senior information Security Engineer in our Worcester, MA location or remote work arrangement.
 
POSITION OVERVIEW: 
The Senior Information Security Engineer will lead the design, implementation, and management of identity and access solutions using Microsoft Entra (Entra ID/Azure AD, Entra External ID/B2C, and related components).
 This role ensures secure, scalable, and user-friendly identity experiences across internal and external platforms.
 This is a full time, exempt role.
 
IN THIS ROLE, YOU WILL:Identity Architecture & Engineering: 
<ul>
<li>Design and implement scalable identity solutions with Entra ID and B2C.</li>
<li>Integrate cloud and on-prem systems for SSO, MFA, and Just-In-Time provisioning.</li>
<li>Deploy secure authentication flows (OAuth2, OpenID Connect, SAML, Conditional Access).</li>
</ul>
Custom Policy Development: 
<ul>
<li>Build and maintain custom policies using Identity Experience Framework (IEF).</li>
<li>Manage TrustFrameworkPolicy XML files, REST API integrations, claims transformations, and multi-step authentication.</li>
<li>Customize user journeys (sign-up, sign-in, password reset, profile editing).</li>
<li>Troubleshoot and optimize policies using Application Insights and B2C logs.</li>
</ul>
Identity Governance & Compliance: 
<ul>
<li>Manage lifecycle processes (provisioning, de-provisioning, access reviews).</li>
<li>Administer Privileged Identity Management (PIM), Access Packages, and Conditional Access.</li>
<li>Ensure compliance with frameworks (NIST, ISO 27001).</li>
<li>Stay current with Microsoft Entra roadmap and IAM technologies.</li>
</ul>
Collaboration & Leadership: 
<ul>
<li>Partner with application teams and stakeholders to deliver secure identity solutions.</li>
<li>Integrate Entra ID with third-party and on-prem systems.</li>
<li>Provide technical leadership and mentor junior engineers.</li>
</ul>
WHAT YOU NEED TO APPLY: 
<ul>
<li>5+ years in identity engineering, SDLC-based solution development, and Active Directory support.</li>
<li>Bachelor’s degree in computer science, Information Technology, or related field, or the equivalent combination of education, training and experience</li>
<li>Deep knowledge of Microsoft Entra ID and B2C, including custom policy development.</li>
<li>Strong understanding of IAM frameworks, governance, and modern authentication protocols.</li>
<li>Experience with hybrid identity, Active Directory, and troubleshooting multi-tenant environments.</li>
<li>Proficiency in PowerShell, Kusto, Azure CLI, automation, and secure API solutions.</li>
<li>Familiarity with audit, log analytics, DevOps, monitoring, and reporting in Azure/Entra.</li>
<li>Background in architecture, IAM roadmaps, and exposure to AI/ML for technology enhancements.</li>
<li>Strong problem-solving, communication, and documentation skills.</li>
<li>Ability to lead, mentor, and collaborate across teams.</li>
<li>Skilled in presentations, training, and customer-focused troubleshooting.</li>
<li>Must be eligible to work in the US without requiring sponsorship now or in the future (i.e Lawful Permanent Residence or US Citizen)</li>
</ul>
EXTRA POINTS FOR: 
<ul>
<li>Microsoft certifications (SC-300, SC-100, AZ-500).</li>
<li>Knowledge of CI/CD pipelines, DevSecOps, hybrid identity, and ADFS.</li>
</ul>
CAREER DEVELOPMENT: 
It’s not just a job, it’s a career, and we are here to support you every step of the way. We want you to be successful and fulfilled. Through on-the-job experiences, personalized coaching and our robust learning and development programs, we encourage you – at every level – to grow and develop.
 
BENEFITS: 
We offer comprehensive benefits to help you be healthy, build financial security, and balance work and home life. At The Hanover, you’ll enjoy what you do and have the support you need to succeed.
 
Benefits include: 
<ul>
<li>Medical, dental, vision, life, and disability insurance</li>
<li>401K with a company match</li>
<li>Tuition reimbursement</li>
<li>PTO</li>
<li>Company paid holidays</li>
<li>Flexible work arrangements</li>
<li>Cultural Awareness Day in support of IDE</li>
<li>On-site medical/wellness center (Worcester only)</li>
<li>Click here for the full list of Benefits</li>
</ul>
EEO statement: 
The Hanover values diversity in the workplace and among our customers. The company provides equal opportunity for employment and promotion to all qualified employees and applicants on the basis of experience, training, education, and ability to do the available work without regard to race, religion, color, age, sex/gender, sexual orientation, national origin, gender identity, disability, marital status, veteran status, genetic information, ancestry or any other status protected by law.
 
Furthermore, The Hanover Insurance Group is committed to providing an equal opportunity workplace that is free of discrimination and harassment based on national origin, race, color, religion, gender, ancestry, age, sexual orientation, gender identity, disability, marital status, veteran status, genetic information or any other status protected by law.”
 
As an equal opportunity employer, Hanover does not discriminate against qualified individuals with disabilities. Individuals with disabilities who wish to request a reasonable accommodation to participate in the job application or interview process, or to perform essential job functions, should contact us at: HRServices@hanover.com and include the link of the job posting in which you are interested.
 
Privacy Policy: 
To view our privacy policy and online privacy statement, click here.
 
Applicants who are California residents: To see the types of information we may collect from applicants and employees and how we use it, please click here.
 
Compensation: 
The target hiring range for this role may vary based on geographic location and other factors, including merit or performance, demonstrated proficiency, skills for the role, education, travel requirements, and experience. Additional compensation may include an annual bonus (which could take the form of a general bonus, sales incentive, or short-term incentive), long-term incentive or spot recognition awards. The posted range reflects our ability to hire at different position titles and levels depending on background and experience.

Senior Information Security Engineer - Entra (REMOTE OR MA BASED)

TIAG

<div>TIAG is now hiring an Information Systems Security Engineer (ISSE) to join our team at Naval Information Warfare Center (NIWC) Atlantic. For this program TIAG provides a range of cybersecurity, Information Technology (IT) engineering services support, assessment, and authorization (A&amp;A), and cyber operations support including support for life-cycle management policy, guidance, oversight, and direction for a cyber analytics system.
An active Top Secret clearance with SCI eligibility is required to start work. This position reports onsite at our client location and has potential for telework 1-2 days per week. Travel may be required. Core business hours are 0900 to 1500.
Duties &amp; Responsibilities:
<ul><li>Responsible for building, deploying and Patching HBSS Windows and ACAS servers.</li><li>
Responsible for building, maintaining, and patching all ePO, Security Center, and Nessus servers.</li><li>
Provides Security Center accounts for Vulnerability Managers to scan devices within ACAS.</li><li>
Assist with remediation/mitigation or make recommendation based on vulnerability findings from ACAS and STIGs.</li><li>
Knowledge of building virtual servers, deploying, and patching all McAfee modules via the ePO, configuring McAfee policies for each environment.</li><li>
STIG&rsquo;ing HBSS Windows OS, McAfee policies to comply with benchmarks (Not reviewing or confirming), STIG&rsquo;ing other servers.</li><li>
Ability to Run SCAP scans on Windows and RHEL servers.</li><li>
Able to troubleshoot Security Center and Nessus scanner issues.</li><li>
Assist with selecting RMF Security Controls.</li><li>
Develop technical documents like RMF policies, SLCM, IRP, DRP, Security CONOPS.</li><li>
Assist with selecting RMF Security Controls.</li><li>
Draft technical boundary and architecture diagrams.</li><li>
Harden and implement applicable STIGs.</li></ul>
<ul><li>DoD Top Secret Clearance</li><li>
Bachelor of Science (B.S.) in Information Technology, Cybersecurity, Engineering or similar</li><li>
Security+; compliance with DoD 8570 IAT Level III (ex. CISSP)</li><li>
5+ years of Information Management/Information Technology experience providing both technical and cyber analyst support, HBSS, ACAS</li><li>
Cyber analyst experience should include supporting the development, review, and approval of RMF A&amp;A packages for software systems and enclaves</li><li>
5+ years of experience with IA / INFOSEC concepts and requirements: Firewall Policy, Ports &amp; Protocols, Cybersecurity, Cybersafe, DoD/DON RMF processes and standards, etc.</li><li>
Experience with wireless technologies and IEEE 802.11 standards is required</li><li>
Experience with the DISA published Security Technical Information Guidance (STIG) requirements and compliance processes, SCAP Content Checker, Security Readiness Review (SRRs), and other DoD approved tools like eMASSter or Vulnerator</li><li>
Ability to manage time well to meet assigned milestones</li><li>
Strong communication skills; motivated to investigate, analyze, and document system issues and resolutions; provides consistent status updates to ensure IT security projects stay focused</li><li>
Strong work ethic and a proven professional - respectful, dependable, takes initiative and follows through</li><li>
Up to 15% travel may be required</li></ul> 
 
TIAG is a federal contractor and an equal opportunity and affirmative action employer that does not discriminate and employment decisions shall be based solely on merit and without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. 
This policy applies to all terms and conditions of employment. To achieve our goal of equal opportunity, TIAG maintains an affirmative action plan through which it makes good faith efforts to recruit, hire, and advance in employment qualified individuals with disabilities and protected veterans.</div>

Information Systems Security Engineer (ISSE), Sr.

inDriver

<div><div><div>We are looking for an Application Security Engineer in the AppSec team.</div><div>
AppSec provide the following services: Consulting development teams on security issues, Security audit of service architecture, Security audit of service implementation, Automatic search for vulnerabilities using SCA, SAST, DAST, secret scan tools, Support of the Bug Bounty program, Conducting awareness events: Secure development course, phishing simulations, Capture The Flag competitions</div></div></div>
 <div><div><div><div><div><h2 class="jobSectionHeader">Key Responsibilities</h2>
<ul><li>Conducting web application audits</li><li>
Processing the results of automatic scans of source code (secrets, vulnerable dependencies, SAST, DAST)</li><li>
Interaction with development teams to fix vulnerabilities</li><li>
Conducting awareness activities</li><li>
Reproducing vulnerabilities obtained from the BugBounty platform, creating regress tests</li></ul><div></div><h2 class="jobSectionHeader"> 
Skills, Knowledge and Expertise</h2>
<ul><li>Having a higher education in IT, ideally information security</li><li>
Knowledge of at least one high-level programming language, ideally Golang</li><li>
Experience in IT from 1 year</li><li>
Basic skills in working with operating systems and databases</li><li>
Basic understanding of OWASP Top 10 vulnerabilities</li><li>
Ability to learn quickly</li></ul><div></div><h2 class="jobSectionHeader"> 
Conditions &amp; Benefits</h2>
<ul><li>Stable salary, official employment</li><li>
Health insurance</li><li>
Hybrid work mode and flexile schedule</li><li>
Access to professional counseling services including psychological, financial, and legal support</li><li>
Discount club membership</li><li>
Diverse internal training programs</li><li>
Partially or fully payed additional training courses</li><li>
All necessary work equipment</li></ul></div></div></div></div></div><div></div>

Senior Application Security Engineer

Deutsche Bank

<div><h2 class="jobSectionHeader">Job Description:
</h2>Job Title: Senior Engineer - Lead Data Security Engineer, AVP
Location: Pune, India
Role Description
<ul><li>We are seeking a Data Security Engineer to design, implement and manage security measures that protect sensitive data across our organization. This role focusses on the execution and delivery of Data Security solutions, focusing on configuration, engineering, and integration within a complex enterprise environment.
</li><li>While the role operates within Cybersecurity the person will collaborate with IT, Risk Management, and Business Units on a case-by-case basis, delving Data Loss prevention solutions.
</li><li>The ideal candidate understands and manages the existing tool stack within a complex environment, navigates through technical integration challenges and supports the transition from legacy solutions to new solutions within the pillar and across different areas of the bank.
</li><li>This role will work on specific tools like Symantec DLP, Zscaler but require the flexibility to evaluate and integrate new solutions like PaloAlto, Fortinet, Microsoft Purview and capabilities in existing cloud security solutions like Azure/GCP.
</li></ul>What we&rsquo;ll offer you
As part of our flexible scheme, here are just some of the benefits that you&rsquo;ll enjoy
<ul><li>Best in class leave policy
</li><li>Gender neutral parental leaves
</li><li>100% reimbursement under childcare assistance benefit (gender neutral)
</li><li>Sponsorship for Industry relevant certifications and education
</li><li>Employee Assistance Program for you and your family members
</li><li>Comprehensive Hospitalization Insurance for you and your dependents
</li><li>Accident and Term life Insurance
</li><li>Complementary Health screening for 35 yrs. and above
</li></ul>Your key responsibilities
<ul><li>Policy Development and Implementation: Design and implement data loss prevention policies, standards, and procedures to protect sensitive data from unauthorized access and disclosure.
</li><li>Risk Assessment: Conduct regular assessments of our implementation to identify vulnerabilities and potential threats to the organization's data. Develop strategies to mitigate identified risks.
</li><li>DLP Solutions: Evaluate, deploy, and manage DLP solutions and technologies. Ensure that these tools are effectively integrated and configured to protect sensitive data across the organization. Act as Delivery manager and meet deadlines.
</li><li>Monitoring and Analysis: Monitor data movement and usage to detect and respond to potential data breaches or policy violations. Analyse incidents to identify root causes and develop corrective actions.
</li><li>Collaboration: Work with IT, legal, and business teams to ensure that DLP measures align with organizational goals and regulatory requirements. Provide guidance and support to stakeholders on data protection issues.
</li><li>Design and Implement data security frameworks, including encryption, tokenization and anonymization techniques within a hybrid environment
</li><li>Implement cloud-native security controls (e.g., CASB, CSPM, DSPM ) to protect data in SaaS, IaaS, and PaaS environments.
</li><li>Implement Digital Rights Management, encryption and tokenization strategies and solutions to protect data in hybrid environments and prevent unauthorized access and disclosure.
</li></ul>Your skills and experience
Technical Expertise
<ul><li>12+ years of hands-on experience in Data Security, Information Protection, or Cloud Security.
</li><li>Strong expertise in delivering Data Security platforms (Symantec, Netskope, Zscaler, PaloAlto, Fortinet, etc.).
</li><li>Knowledge of Cloud Service Provisioning and experience with Cloud Security (AWS, Azure, GCP) and SaaS data protection solutions.
</li><li>Experience with Cloud Security (CASB), SaaS Security Posture Management (SSPM), Data Security Posture Management (DSPM).
</li><li>Proficiency in network security, endpoint protection, and identity &amp; access management (IAM).
</li><li>Scripting knowledge (Python, PowerShell, APIs) for security automation are a plus.
</li><li>Hands-on experience with AI/ML and data security related remediations are a plus.
</li></ul>Soft Skills &amp; Collaboration
<ul><li>Strong problem-solving and analytical skills to assess security threats and data exposure risks.
</li><li>Ability to work cross-functionally with Security, IT, and Risk teams.
</li><li>Effective written and verbal communication skills, especially when documenting security configurations and investigations.
</li><li>Professional certifications such as CISSP, CISM, CCSP, GIAC (GCIH, GCFA) PMP &ndash; Project Management Professional
</li></ul>How we&rsquo;ll support you
<ul><li>Training and development to help you excel in your career
</li><li>Coaching and support from experts in your team
</li><li>A culture of continuous learning to aid progression
</li><li>A range of flexible benefits that you can tailor to suit your needs
</li></ul>About us and our teams
Please visit our company website for further information:
https://www.db.com/company/company.html
We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
<div><div><div><div>Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.</div></div></div></div></div>

Senior Engineer - Lead Data Security Engineer, AVP

Search 10000+ Information security engineer jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 information security engineer jobs Near Me

Senior Information Security Engineer

Senior Information Security Engineer

Senior Information Security Engineer - Micro-segmentation

Senior Information Security Engineer - Entra (REMOTE OR MA BASED)

Information Systems Security Engineer (ISSE), Sr.

Senior Application Security Engineer

Senior Engineer - Lead Data Security Engineer, AVP