Information Security Engineer

Advocare•Marlton, NJ

20h•Hybrid

About The Position

The Information Security Engineer will be responsible for the security of the organization’s Azure and Office 365 services, network, and endpoints. The Information Security Engineer will also support and execute on project tasks and deliverables in support of the organization’s information security roadmap/strategy.

Requirements

Expert knowledge and proven experience with cloud and cyber security principles, technologies, and best practices
Experience with leading and responding to security incidents and events.
Demonstrates professionalism, confidentiality, and diplomacy and can serve a wide range of employees with equity and tact.
Thorough knowledge and understanding of security functions within Azure and Office 365 services.
Thorough knowledge and understanding of network and endpoint security.
Ability to work independently with minimal supervision.
Excellent customer service skills.
Effective verbal and written communication skills.
Ability to establish and maintain effective working relationships with a diverse group of people at all levels of the organization.
Commitment to excellence and high standards
Detail oriented with strong follow-up initiative
Versatility, flexibility, and a willingness to work within constantly changing priorities with enthusiasm.
Bachelor’s degree in cyber security, information technology, and/or equivalent experience.
3-5 years of experience working as a cyber security analyst or engineer.
ITIL Foundations Certification or willingness to obtain it within one year of hire date.
Knowledge and experience working in a cloud-based infrastructure.

Nice To Haves

Healthcare industry experience
Azure and Office 365 support experience
CISSP, CCSP or CompTIA Security+ certification
Knowledge of Cybersecurity Frameworks (NIST CSF, ISO27001, HITRUST, HIPAA)
Strong knowledge and experience with the following: Azure and Office 365 security technologies (Microsoft Defender, Azure Security Center, Azure Sentinel, Microsoft Cloud App Security, Microsoft ATP), EPP and EDR solutions, Email Security and Encryption Services, Data Loss Prevention tools

Responsibilities

Ensure the organization’s cloud infrastructure and data is secure and protected by implementing appropriate security controls in Azure and Office 365 based upon industry best practices.
Monitor the M365 and Azure Security Score, follow and implement Microsoft’s recommendations and deviate where necessary to continue to strengthen the organizations security posture in Azure and Office 365.
Lead efforts in remediating vulnerabilities and identifying gaps or security deficiencies on all network and endpoint devices using vulnerability management tools and risk assessments.
Manage and maintain Privileged Access Management (PAM) system.
Perform risk assessments and reviews for onboarding practices, third-party vendors, and self-assessments for the organization.
Assist in updating and executing the security awareness program.
Keep abreast of security trends and threats and ensure that the organization’s security practices are updated and aligned.
Serve as the lead and point of contact for all security related events and breaches, coordinating efforts across all technology teams.
Proactively search, detect, and respond to security events and incidents utilizing EDR and SIEM security monitoring tools.
Act as the SME for the organization’s security tools and applications including the evaluation, implementation, and maintenance of such tools.
Support a variety of security initiatives and projects that align with the organization’s information security roadmap.
Other duties as assigned.