Information Security Engineer

Sentry Insurance Agency•Stevens Point, WI

2d•Hybrid

About The Position

As an Info Sec Engineer, you’ll own a security domain as an SME, implement controls, automate processes, ensure compliance, and resolve incidents to reduce risk. As an Information Security Engineer, you'll be assigned a security domain such as cloud security, data protection, security automation, endpoint security, or requirements verification and will maintain and improve the associated systems, processes, and standards to manage and reduce risk to the organization. You'll also serve as the subject matter expert for your assigned domain and leverage your experience with it to influence security policies and practices. You will implement security platforms and/or controls and automate security processes. You will also resolve issues such as build automation to resolve compliance findings and maintain and restore critical systems and you'll assist with critical issues such as incidents occurring across multiple security systems. This role will be filled following our hybrid work model at our Stevens Point, WI offices. This role is NOT available for remote work. Sentry does not offer employment in this position to holders of F-1, J-1, and H-1 Visas for the purpose of obtaining practical experience

Requirements

Associate degree or equivalent work experience in Information Security, Networking, Systems Administration or Computer Science
Minimum 4 years of related work experience
Thorough, hands-on understanding of network firewall/proxy design and operations, cryptographic technologies, AWS network and security platforms, and data protection technologies.
Scripting experience required

Nice To Haves

Bachelor’s degree preferred
Sec+, AWS SysOps Administrator, or GSEC certification preferred

Responsibilities

Review the maturity and effectiveness of multiple security platforms ensuring proper performance, availability and capacity management.
Conduct monitoring through automated functional and performance testing, investigate potential problems and determine solutions, as necessary, to avoid service interruptions.
Recommend and implement new features and functions within platforms to streamline processes and enable continuous deployment of new capabilities
Provide moderate to complex technical maintenance services and oversee implementation of patches to integrated security systems and solutions ensuring continuous availability and operation.
Evaluate functionality, oversee and conduct testing, oversee virus management, and provide recommendations and maintain information security policies, procedures and systems
Conduct audits and code testing to identify data security vulnerabilities and undertake necessary actions to eliminate identified threats.
Implement architectural changes when intrusions occur and monitor effectiveness of implemented changes.
Create reports to summarize findings to management
Ensure security plans, controls, processes, standards, policies and procedures are aligned with overall information standards.
Identify security risks and exposures, determine the causes of security violations and suggest procedures to halt future incidents and improve security
Communicate, implement, enforce and monitor security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure or destruction.
Provide training, informational and educational materials to support technology users
Contribute to and lead team discussions and proactively engage around security topics such as emerging technology, data protection strategies, and secure process enhancement to allow the team to make intelligent and secure project decisions
Collaborate within Information Security to contribute expertise in relevant domains during security events and project decision meetings and actively learn security domains outside their core domain
Maintain a working knowledge of security trends and adapts these trends to the organization's environment by building proactive detections, defenses, and processes
Participate in on-call rotations to provide 24/7 support for critical systems and capabilities
Participate in developing and adoption of security best practices within the information security program and organization
Perform other job-related duties as assigned from time to time