IT Security Engineer || New York, NY (Hybrid)
DMS Vision•Frisco, AL
•Hybrid
About The Position
The IT Security Engineer will help strengthen the organization’s internal and cloud security framework. The role supports incident response, business continuity and disaster recovery planning, vulnerability assessments, and compliance with data security policies and standards, including ISO 27001:2022, ISO 27017:2015, and ISO 22301, as well as client audit requirements. The engineer will work across on-premises and cloud environments, particularly Azure, AWS, and Microsoft E5, and contribute to improving security visibility, detection, architecture, operations, and awareness.
Requirements
- Bachelor’s degree in Computer Science or a related field, or at least 5 years of applicable experience.
- In-depth knowledge of Azure, AWS, Microsoft E5, Sentinel, Defender for Endpoint, and other security technologies.
- Strong expertise in network security and monitoring practices.
- At least one current security certification; examples listed include CISSP, CISM, CISA, GIAC, CCSP, OSCP, and CEH.
- Proficiency in automation scripting with Python, Bash, and PowerShell.
- Experience designing security architectures across different deployment models.
- Familiarity with enterprise security solutions and security protocols.
- Knowledge of regulatory compliance and information security management frameworks, including NIST, ISO 27001, PCI DSS, GDPR, and HIPAA.
- Understanding of security frameworks such as MITRE ATT&CK and CIS 20.
- Experience with security in DevOps and CI/CD pipelines, including container orchestration security.
- Professional Services industry background.
- Hands-on expertise with Azure, Microsoft E5, Azure Compliance Manager, AWS, and Sentinel.
- Working experience with regulatory compliance frameworks such as NIST, ISO 27001, PCI DSS, GDPR, and HIPAA.
- PowerShell and KQL experience.
- DLP experience with Netskope or a similar tool.
- Experience with CASB solutions, preferably Netskope.
Responsibilities
- Provide round-the-clock support for security incidents, ensuring prompt escalation and resolution.
- Mentor junior team members in security tools, report generation, and problem-solving, and facilitate cross-training.
- Document and escalate unresolved network security issues.
- Develop and maintain documentation of security processes and systems.
- Improve visibility and detection capabilities in managed Azure and AWS environments.
- Perform penetration testing, identify security gaps, and recommend remediation.
- Assist with the design, development, implementation, and troubleshooting of information systems and cybersecurity software.
- Automate security testing and auditing to prevent regressions and identify issues before production deployment.
- Provide expertise in systems, networks, encryption, authentication, and governance.
- Collect reports, metrics, and key performance indicators to evaluate security controls.
- Create materials and participate in activities to raise organizational security awareness.
- Oversee Active Directory, Privileged Identity Management, Local Administrator Password Solution, and related privilege management technologies.
- Partner with leadership to implement the Zero Trust security model and strengthen CIS standards.
- Lead Business Continuity and Disaster Recovery initiatives, working with the CIO, CISO, and Director of Enterprise Architecture and Service Delivery to test and improve strategies.
- Be available on-call for security incidents and work with vendors and the Service Delivery team to mitigate threats.
- Proactively assess security controls for exploitable vulnerabilities and recommend remediation.
- Ensure the operational efficiency and health of endpoint security agents.
- Maintain current security architecture diagrams and participate in cybersecurity initiatives and projects.
