Information Security Engineer

Wounded Warrior Project • Jacksonville, FL

21d • Hybrid

About The Position

The Wounded Warrior Project Information Security Engineer is a subject matter expert responsible for designing, implementing, and maintaining security controls that protect the organization’s systems, identities, applications, cloud services, and information assets. The role partners with business and technology teams to advance cybersecurity capabilities across identity and access management, data protection, cloud security, application security, security operations, and emerging technology governance. The engineer evaluates and implements security solutions, promotes security best practices, and helps strengthen the organization’s overall security posture.

The position works in a general office environment with temperature control and requires sitting for extended periods. Travel may be required up to 25%. The role follows a flexible hybrid schedule of three days in the office and two days working from home.

Requirements

• Five years of experience working in information security.
• Three years of experience designing, implementing, or administering enterprise security technologies and controls.
• Experience with identity and access management, security architecture, data protection, cloud security, application security, or related security disciplines.
• Experience performing security assessments, risk analyses, vulnerability management, and security control implementation.
• Experience partnering with technical and business stakeholders to implement security improvements and best practices.
• Strong knowledge of identity management, access controls, permissions, privileges, encryption, web security, intrusion prevention, and data loss prevention technologies.
• Knowledge of identity and access management principles, cloud security concepts and architectures, application security practices, and security governance, risk management, and compliance concepts.
• Understanding of data protection and data lifecycle management concepts.
• Ability to evaluate the security implications of emerging technologies, including artificial intelligence and automation solutions.
• Ability to work effectively with teammates, business partners, vendors, and other stakeholders to accomplish objectives and resolve security-related issues.
• Skill in developing clear technical documentation and security training materials.
• Strong analytical, diagnostic, and problem-solving skills, including the ability to identify, assess, and resolve complex security issues.
• Strong configuration, implementation, and solution-design skills.
• Self-motivated, able to take initiative, and able to drive projects to completion in a project-based environment.
• Strong organizational and time-management skills, including the ability to independently manage multiple priorities and deadlines in a fast-paced, evolving environment.
• Ability to maintain confidentiality and exercise sound judgment when working with sensitive information and security-related matters.
• Excellent verbal and written communication skills and ability to communicate effectively with people of diverse backgrounds and technical skill levels.
• Ability to influence others and build consensus without direct authority.
• Independent thinker with critical-thinking and analytical capabilities; team-oriented and collaborative.
• Commitment to fostering a positive work environment and supporting team and organizational success.
• Unequivocal commitment to high standards of personal and business ethics and conduct; mission-driven and guided by core values.
• Bachelor’s degree in computer science, information systems, or a related field, or an equivalent combination of applicable education, training, certification, and experience.

Nice To Haves

• Experience supporting cloud-first environments.
• Experience supporting Microsoft-based security ecosystems or comparable enterprise security platforms.
• Experience with identity governance, data protection, security operations, or security monitoring technologies.
• Experience supporting security governance or compliance initiatives.
• Information security certifications such as CISSP, CISM, Security+, SC-100, SC-200, SC-300, or SC-500.

Responsibilities

• Develop, implement, and maintain security strategies, platforms, and overall security architecture.
• Design, implement, administer, and continuously improve enterprise security technologies and controls.
• Serve as a security subject matter expert for the organization and third-party vendors.
• Design and administer identity and access management controls, including authentication, authorization, access governance, and privileged access management processes.
• Support security architecture reviews and risk assessments for cloud platforms, SaaS solutions, and third-party technologies.
• Partner with application owners and technology teams to integrate security requirements into software acquisition, development, and implementation processes.
• Configure and monitor security information and event management (SIEM) platforms.
• Perform vulnerability scans, risk analyses, and security assessments, and lead remediation efforts.
• Evaluate emerging technologies, including artificial intelligence and automation platforms, and help develop security controls and governance practices.
• Support information protection, data classification, data retention, and security governance initiatives.
• Define, measure, and report on security metrics and performance indicators.
• Provide technical guidance and mentorship to security analysts and other IT teammates.
• Research and remain current on emerging security threats, trends, vulnerabilities, and best practices.
• Participate in incident response, threat investigations, and remediation activities, and partner with security operations personnel to improve detection and response capabilities.
• Evaluate technologies and processes that enhance security capabilities and operational effectiveness.
• Design and maintain controls supporting data protection, information governance, encryption, and secure data-handling practices.
• Analyze existing security controls and recommend improvements to strengthen the organization’s security posture.
• Participate in evaluating, selecting, and implementing technology solutions.
• Prepare and maintain security documentation, including policies, procedures, standards, and training materials.
• Attend and participate in required training and meetings, including orientation, WWP Cares, ASIST Suicide Prevention training, leadership and culture/team-based training, and departmental huddles.
• Perform other related duties as assigned.

Benefits

• Flexible hybrid work schedule: three days in the office and two days working from home.
• Full medical, dental, and vision coverage for teammates and family members.
• Competitive pay and performance incentives.
• Fun, mission-focused, and collaborative team environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior