Information Security Engineer

TBC Corporation•Palm Beach Gardens, FL

About The Position

The Information Security Engineer is part of TBC Corporation’s information security operations engineering team, with a primary focus on securing the company’s cloud environments. The team provides secure configuration, security foundations, risk management, and operational security expertise across cloud and on-premises platforms, applications, infrastructure, and business technology initiatives. It identifies and reduces risk, strengthens identity and access controls, operationalizes cloud-native and third-party security solutions, supports secure architecture decisions, responds to security events, and partners with technology teams to embed security into cloud operations and delivery practices. The Security Engineer serves as a cybersecurity subject matter expert and supports TBC security and technology professionals by applying cloud security standards to improve the security posture of enterprise operations. The position also supports cloud security projects and audits, security incident response, secure AI enablement, and the integration of security practices into cloud delivery pipelines.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a related field, or equivalent experience.
3–5 years of hands-on experience in security engineering, cloud security, cloud operations, infrastructure security, or a related role.
Strong conceptual understanding of cloud security foundations, information security theory, shared responsibility, defense-in-depth, identity-centric security, and risk-based control design.
Strong multitasking, analytical, and troubleshooting skills.
Experience meeting with IT, cloud operations, application, DevOps, and management teams to discuss and resolve business concerns related to cloud security and risk.
Proficiency in MS Office products.
Ability to prioritize and balance multiple sensitive projects concurrently.
Experience with cloud-native security platforms and capabilities such as Microsoft Defender for Cloud, Azure Policy, AWS Security Hub, GuardDuty, CloudTrail, Config, Google Cloud Security Command Center, or equivalent services.
Strong experience identifying cloud risk, prioritizing remediation, and operationalizing cloud security solutions using CSPM, CNAPP, vulnerability management, SIEM, SOAR, and ticketing or workflow platforms.
Experience with cloud identity and access management, including RBAC, least privilege, privileged access, service principals, managed identities, service accounts, conditional access, MFA, and access reviews.

Nice To Haves

Professional certifications from ISACA, (ISC)2, SANS, Microsoft, AWS, Google Cloud, or other cloud security certification providers.
5+ years of relevant information technology, infrastructure, cloud operations, or information security experience.
Bilingual in Spanish and English.

Responsibilities

Establish and maintain cloud security standards, guardrails, and secure configuration practices supporting cloud security foundations, compliance expectations, and enterprise risk reduction.
Identify, assess, prioritize, and remediate cloud risks, including misconfigurations, excessive permissions, exposed services, unmanaged assets, vulnerable workloads, and insecure data storage.
Design, review, and improve cloud identity and access controls, including least privilege, privileged access, service accounts and principals, workload identities, MFA, conditional access, and access reviews.
Deploy, manage, tune, and operationalize cloud-native and third-party security platforms, including CSPM, CNAPP, vulnerability management, SIEM, workload protection, and data protection solutions.
Analyze logs, identity events, workload telemetry, posture findings, vulnerabilities, and security alerts; support threat detection and response and recommend control improvements.
Assess risks related to AI tools, cloud-based and private AI services, data usage, model access, third-party integrations, and business use cases; recommend practical safeguards aligned with security and compliance expectations.
Partner with application, platform, and DevOps teams to incorporate DevSecOps into cloud delivery pipelines, including secure design reviews, automated security testing, vulnerability remediation, secrets protection, infrastructure-as-code security, and release governance.
Partner with security, infrastructure, application, DevOps, audit, and operations teams to integrate cloud security into projects, improve processes, document standards, and communicate security posture and remediation progress.
Support cloud security projects and audit activity, including JSOX, PCI, ISO, and internal security assessments.
Investigate and remediate cloud security incidents, risky configurations, identity exposures, and control gaps; implement preventative measures as appropriate.
Assist with creating, reviewing, updating, implementing, and documenting cloud architecture, security architecture, data flow diagrams, and control mappings.
Apply relevant security frameworks and benchmarks, including CIS Benchmarks, ISO 27001, and PCI-DSS, to cloud environments.
Perform other duties as assigned.