Information Security Engineer

MX Technologies•Lehi, UT

About The Position

MX is seeking a senior, hands-on security expert to address complex security problems and help protect the company’s digital assets and infrastructure. The role sits on the Security Engineering team, which partners with development and operations teams on application security, infrastructure and cloud security, threat modeling, incident response, compliance, and security automation. The engineer will establish approaches for new security initiatives, evaluate and resolve complex issues, and may coordinate other engineers as a team lead. They will serve as a trusted security advisor to peers and senior leaders. The role aims to accelerate vulnerability remediation, strengthen incident response, reduce risk across applications and infrastructure, and support requirements such as SOC 2, PCI, and contractual security obligations.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
At least 8 years of related security engineering experience with a bachelor's degree, 6 years with a master's degree, or 3 years with a PhD; equivalent experience is also accepted.
Demonstrated experience in application security and/or infrastructure security, including securing networks, servers, or cloud environments.
Demonstrated experience performing threat modeling and risk assessments and using the results to prioritize security work.
Experience supporting compliance with industry standards such as SOC 2 or PCI.

Nice To Haves

Master's degree or PhD in Computer Science, Information Security, or a related field.
Experience leading or coordinating security incident response from detection through recovery.
Experience integrating security tools and automation into development and operational workflows.
Experience designing or delivering secure code training or other security awareness programs.
Experience in a regulated, fintech, or SaaS environment.
A track record of mentoring engineers or acting as a team lead.

Responsibilities

Own and execute application security initiatives, identify vulnerabilities, and promote secure coding practices throughout the development lifecycle.
Design and implement security controls for networks, servers, and cloud environments.
Lead threat modeling and risk assessments, using their findings to prioritize security investments.
Develop and execute incident response plans covering detection, containment, and recovery, and drive complex incidents through resolution.
Provide technical expertise on regulations, standards such as SOC 2 and PCI, and contractual requirements; partner with compliance and governance stakeholders to deliver audit-ready controls.
Build and maintain security tooling and automation integrated into development and operational workflows.
Partner with development and operations teams and contacts outside the security function to deliver practical security solutions.
Educate employees on security best practices and emerging threats, with a focus on secure code training.
Track and improve security outcomes, including vulnerability remediation time, incident response times, patch coverage, and security control effectiveness, and translate them into business impact.
Mentor security engineers and coordinate team activities on new assignments as a team lead.