Information Security Solutions Engineer II

This is a fully remote position, open to applicants in New Jersey.

📋 Description

• Evaluate and design security architecture for Azure and AWS cloud platforms.

• Convert business requirements into effective security controls.

• Offer security architecture guidance and design frameworks to Infrastructure, Cloud, and Development teams.

• Construct, deploy, and manage security infrastructure as code utilizing Terraform, Terragrunt, ARM, and Bicep.

• Conduct third-party vendor security assessments and suggest mitigations or acceptance criteria.

• Contribute to the security architecture and operation of enterprise AI platforms, including MCP gateways, LLM routers, and AI gateways.

• Maintain comprehensive documentation of security controls, configurations, architectural decisions, and procedures.

• Perform threat modeling with development teams and assist in vulnerability remediation through verified closure.

• Support Identity and Access Management (IAM) for cloud and application identities, implementing least-privilege roles, secrets management, and authentication/authorization patterns.

• Manage and maintain application and cloud security tools.

• Integrate security controls and testing into CI/CD pipelines and developer workflows.

• Facilitate third-party penetration testing, attack surface evaluations, results triage, and remediation tracking.

• Report on vulnerability exposure, remediation status, and risk to application owners and management.

• Engage in incident response, investigation, containment, and remediation efforts.

• Lead assigned initiatives or workstreams.

• Share secure design and coding methodologies with peers and developers.

• Monitor emerging threats and propose enhancements to Holman's security posture.

• Perform additional duties and special projects as assigned.

⛳️ Requirements

• 5–7 years of combined experience in information security and technical engineering, with substantial focus on cloud security, application security, or both.

• Extensive experience securing Microsoft Azure and Amazon AWS environments in both cloud-native and hybrid settings.

• Practical experience in writing and maintaining infrastructure as code with Terraform, ARM, and/or Bicep.

• Ability to read and interpret application code in at least one of .NET, Python, Ruby, or Node.js.

• Solid understanding of OWASP Top 10, OWASP API Security Top 10, threat modeling methodologies such as STRIDE, and secure software development practices.

• Knowledge of Entra ID, AWS IAM, managed identities, service principals, RBAC, least privilege, OAuth 2.0, and OpenID Connect.

• Experience with CNAPP/CSPM, application security testing, and API security solutions.

• Familiarity with Burp Suite or OWASP ZAP.

• Experience conducting third-party vendor security assessments.

• Familiarity with Cloudflare, Akamai, Fastly, or Imperva.

• Proficient understanding of Microsoft Windows and Microsoft 365, including Entra ID and Intune.

• Familiarity with frameworks such as MITRE ATT&CK, NIST CSF, NIST 800-53, CIS Controls, and ISO 27001/27002.

• Strong scripting skills in Python or PowerShell.

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent professional experience.

• Preferred qualifications include defensive security, AI security, cloud FinOps and observability, container/Kubernetes security, penetration testing, compliance frameworks, and certifications like CISSP, GIAC, OSCP, AWS Security Specialty, or Azure Security Engineer (AZ-500).

🏝️ Benefits

• Health Insurance

• Vision Insurance

• Dental Insurance

• Life and Disability Insurance

• Flexible Spending and Health Savings Accounts

• Employee Assistance Program

• 401(k) plan with Company Match

• Paid Time Off (PTO)

• Paid Holidays, Bereavement, and Jury Duty

• Paid Pregnancy/Parental leave

• Paid Military Leave

• Tuition Reimbursement

• Competitive wages based on job-related skills, experience, relevant education or training, and geographic location