Information Security

TCS•Plano, TX

3d•Onsite

About The Position

This role focuses on designing, implementing, and managing security technologies to protect the organization's infrastructure and data. The position involves monitoring for security breaches, assisting in incident response, conducting vulnerability assessments, and developing security policies. Collaboration with IT and DevOps teams is crucial, especially for securing cloud environments like Azure. The role also supports compliance efforts and stays updated on emerging threats and regulatory changes.

Requirements

3+ years of experience in information security or cybersecurity engineering.
Strong understanding of network protocols, operating systems, and security architecture.
Experience with SIEM platforms, firewalls, endpoint security, and identity/access management tools.
Familiarity with common attack techniques and frameworks (e.g., MITRE ATT&CK, OWASP Top 10).
Excellent troubleshooting skills for resolving security issues.
Strong communication skills with the ability to work collaboratively across teams and convey technical concepts clearly to both technical and non-technical stakeholders.

Responsibilities

Design, implement, and manage security technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and SIEM.
Experience with log aggregation and threat detection. E.g. Splunk, Microsoft Sentinel.
Conduct vulnerability assessments and penetration testing; manage remediation workflows; data loss prevention; software distribution auditing for policy compliance.
Monitor networks and systems for security breaches and assist in incident detection and response.
Work with IT and DevOps teams to secure infrastructure, including cloud environments (Azure).
Develop and enforce security policies, standards, and best practices.
Assist with compliance efforts (e.g., SOC 2, ISO/IEC 27001, NIST, GLBA, PCI-DSS).
Perform threat modeling, risk assessments, and assist in defining mitigation strategies.
Stay current on emerging threats, vulnerabilities, and regulatory changes.
Create and maintain security documentation, including playbooks and incident reports.