Information Security Engineer

Seven Corners•Carmel, IN

15d

About The Position

The Information Security Engineer is an integral member of the Infrastructure and Operations team and the broader Information Technology organization. This role protects Seven Corners' information assets, systems, networks, and data by implementing, monitoring, and continuously improving security controls, processes, and technologies. The engineer identifies, assesses, and mitigates cybersecurity risks across on-premises, cloud, and SaaS environments, working closely with Infrastructure, Operations, Application Development, Compliance, and business stakeholders to develop and implement security practices that support organizational security, regulatory, and business objectives. The role administers, monitors, and improves security technologies, including endpoint protection, SIEM, identity and access management, vulnerability management, email security, web application firewalls, intrusion detection and prevention systems, cloud security platforms, and related tools. It investigates security incidents, conducts threat and vulnerability analysis, coordinates remediation, and supports security awareness and governance initiatives. The Information Security Engineer also helps maintain and improve the organization's Information Security Management System (ISMS), supports internal and external audits and risk assessments, and contributes to security policies and compliance efforts aligned with ISO 27001 and other applicable frameworks such as HIPAA and PCI DSS. A strong understanding of cloud infrastructure, identity management, security architecture, and modern cybersecurity practices is required; deep knowledge of network protocols, application security, threat detection, incident response, and endpoint security is highly desirable.

Requirements

Bachelor’s degree in Information Technology with a focus on Information Security, a closely related field, or equivalent experience.
Experience with Microsoft security technologies, including Microsoft Defender, Microsoft Sentinel, Entra ID, Active Directory, Intune, Group Policy, Purview, and other Microsoft 365 security services.
Proficiency administering enterprise security tools and platforms.
Experience with vulnerability management, threat detection, incident response, and security monitoring.
Working knowledge of ISO 27001, NIST Cybersecurity Framework (CSF), CIS Controls, HIPAA, and PCI DSS compliance frameworks.
Experience supporting security audits, risk assessments, policy development, and compliance initiatives.
Knowledge of cloud security concepts across Microsoft Azure and SaaS platforms.
Strong problem-solving and communication skills.

Nice To Haves

3–5 years of security engineering experience is preferred.
Deep knowledge of network protocols, application security, threat detection, incident response, and endpoint security.

Responsibilities

Design, implement, and maintain security controls across identity, endpoint, network, cloud, and infrastructure environments.
Administer and optimize security technologies, including SIEM, EDR, MFA, Conditional Access, Identity and Access Management, and Data Loss Prevention.
Monitor security posture and proactively identify, assess, and remediate vulnerabilities and security risks.
Investigate, contain, and support resolution of security incidents and other cybersecurity events.
Evaluate emerging threats, vulnerabilities, and technologies, and recommend mitigation strategies.
Participate in security architecture reviews and provide security guidance for projects, system implementations, and technology initiatives.
Develop, maintain, and enforce technical security standards, procedures, and best practices.
Automate security monitoring, reporting, and operational processes.
Support the ISMS, including risk assessments, security policies, compliance initiatives, and audit activities.
Evaluate compliance with applicable regulatory frameworks through annual gap assessments and remediation planning.
Conduct third-party vendor security risk reviews.
Create and maintain security documentation, standards, procedures, and supporting compliance evidence.
Partner with internal teams, vendors, and third-party security consultants to implement and improve security capabilities.
Participate in change management processes to ensure security requirements are reviewed and addressed.