IT Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Maintain configurations for IT security technologies to enhance the functionality and capabilities of protective equipment.

• Work collaboratively with IT and network engineers to review and analyze network infrastructure modifications.

• Examine firewall and router rules along with access control lists.

• Oversee and support PKI infrastructure for both user and server authentication.

• Create, document, and maintain methodologies for sensitive applications and IT security systems.

• Formulate policies aligned with NIST, FISMA, PCI, PII, and CJIS compliance standards.

• Ensure thorough documentation and adherence to processes for incident identification, investigation, response, risk management, forensic data collection, and regulatory compliance.

• Develop and maintain scripts, routines, and software for security evaluations and assessments.

• Utilize AI/ML-based detection tools to pinpoint malware, unusual behavior, and malicious activities.

• Monitor intrusion detection systems, firewall logs, AI-driven behavioral analytics, and SIEM platforms; coordinate mitigation efforts.

• Conduct security assessments, identify risks, and plan and execute mitigation strategies.

• Lead vulnerability management efforts and engage in patch and risk management processes.

• Participate in emergency operations and the Computer Security Incident Response Team.

• Deploy and manage AI-enhanced SIEM, EDR, and UEBA platforms.

• Assess AI-driven attack vectors and devise countermeasures.

• Investigate IT security topics, AI/ML security tools, generative AI risks, and emerging threats.

• Support cyber training and awareness initiatives, including scenarios specific to AI-related threats.

• Integrate and manage AI-driven security automation workflows, alert triage, threat hunting playbooks, and incident response runbooks.

• Develop and enforce an AI Acceptable Use Policy while applying data loss prevention controls to AI interactions.

• Conduct AI risk assessments with IT and business teams, focusing on model security, data privacy, and supply chain risks.

• Perform other duties as necessary to support business operations.

⛳️ Requirements

• High school diploma or GED.

• Bachelor’s degree in Information Technology or a related technical field.

• Three (3) to five (5) years of direct experience as a Cyber Engineer or in information assurance.

• Extensive experience with industry-standard Vulnerability Assessment tools and AI-powered security platforms, such as Darktrace, CrowdStrike Falcon, Microsoft Sentinel, or comparable solutions.

• Proficient in network monitoring, network security, network equipment programming, firewall configurations, DLP solutions, log monitoring, and event correlation.

• Experience in documenting policies and processes.

• Knowledge of DNS, DHCP, and LDAP.

• Experience in system hardening using STIGs, CIS, or USGCB.

• Experience in Security Incident Response.

• Excellent oral and written communication skills, including policy development.

• Strong analytical and troubleshooting capabilities.

• Ability to act as a technical resource for IT staff.

• Practical experience with AI/ML-powered security tools or SOAR platforms for threat detection, automated response, or security analytics.

• Familiarity with AI governance frameworks and security risks linked to the enterprise deployment of generative AI and LLM applications.

• Must be authorized to work in the US for any employer; sponsorship is not provided.

• Preferred qualifications include: CISM, CISA, CRIS, CISSP, Security+, similar certifications, and AWS/Azure/GCP Security Specialty certification or AI/ML security training.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan.

• Flexible spending account.

• Paid sick leave and vacation time.

• Parental leave.

• Quarterly performance bonuses.

• Opportunities for training.

• Career advancement and education reimbursement programs.