Information Security Engineer

Mariner

6d•$115,000 - $145,000

About The Position

Mariner is seeking a hands-on Security Engineer to join our Security Engineering & Architecture team. In this role, you will report to the VP of Security Engineering & Architecture and be responsible for implementing, configuring, and operating security controls that safeguard our network, infrastructure, cloud, applications, and integration services. You’ll work within established reference architectures and secure-default standards informed by zero trust principles and aligned to NIST CSF and CIS Controls. As a Security Engineer, you’ll be instrumental in building and maintaining the guardrails and observability systems that protect client assets and sensitive information. You’ll also play a key role in onboarding and securing new environments as we integrate numerous acquisitions each year. Collaborating closely with senior engineers, infrastructure teams, and Governance, Risk & Compliance (GRC), you’ll translate standards and control requirements into effective configurations, automation, and enforceable controls. If you thrive on solving technical security challenges, automating routine tasks, and embedding security into enterprise platforms, this position offers significant, hands-on impact.

Requirements

Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.
4–8 years of hands-on experience in security engineering, systems/network engineering with a security focus, or a similar technical area.
Solid experience implementing and operating security controls in hybrid cloud environments (AWS and/or Azure), including network, infrastructure, or application delivery.
Hands-on experience with identity and access management (Okta, Entra ID, MFA, privileged access), with the ability to configure identity as a primary security control.
Proficiency in automation and scripting (PowerShell, Python, Terraform, or equivalent), plus experience in CI/CD, infrastructure-as-code, or policy-as-code toolchains.
Working knowledge of NIST CSF, CIS Controls, and defense-in-depth; ability to apply these as practical engineering guidance.
Proven vulnerability management and remediation experience (CVSS, EPSS, CISA KEV), including prioritizing findings and implementing fixes or compensating controls.
Strong collaboration skills across engineering, infrastructure, and GRC to implement controls and resolve findings.

Nice To Haves

Security certifications (Security+, SSCP, AWS Security Specialty, Microsoft SC-200/AZ-500, or progress toward CISSP).
Experience in regulated industries with audit/examination involvement; financial industry background and Reg S-P familiarity are a plus.
Experience supporting high-volume acquisition integration.
Exposure to securing AI or agentic systems (workload identity, tool authorization, data boundaries).
Demonstrated ability to deliver security capabilities through automation over manual processes.

Responsibilities

Implement Secure-Default Controls: Design, deploy, and maintain security controls across the network, infrastructure, hybrid cloud environments (AWS and Azure), application delivery, and integration services, following architecture team standards.
Drive Zero Trust Adoption: Apply zero trust access models, including verification of identity, device state, and request context, when onboarding new and acquired environments. Grant access by identity rather than network trust.
Develop Controls as Code: Build and maintain policies, infrastructure modules, and automation scripts (PowerShell, Python, Terraform, or equivalent) to deliver preventive controls by default. Tune control rigor according to data sensitivity.
Enhance Observability & Monitoring: Configure and operate telemetry for asset and configuration visibility, access activity monitoring, and exposure management. Ensure new environments achieve visibility upon integration, and support detection and remediation through data layer partnerships.
Reduce Exposure & Remediate Findings: Implement compensating controls (segmentation, access restriction, virtual patching, egress control, feature disablement, credential-scope reduction, enhanced monitoring) and remediate findings swiftly, following architecture team guidance.
Manage Findings at Scale: Use fleet-wide tools to address high volumes of findings, migrate off-standard legacy and acquired systems to standardized builds, and provide evidence for validation and closure.
Support Risk Quantification: Provide GRC with key environment data—such as asset criticality, data classification, exposure state, and dependency mapping—and automate risk scoring to ensure current, consistent risk information.
Assist Acquisition Integration: Execute repeatable onboarding, migration, and decommissioning processes to bring acquired firms onto standardized environments using identity-based integration patterns.