Information Security Engineer

Unigen•Newark, CA

62d

About The Position

The Security Engineer is responsible for designing, implementing, and managing the security infrastructure that protects our applications, data, and networks. This role plays a critical part in threat detection, risk mitigation, and the development of secure architectures while ensuring compliance with industry standards and regulatory requirements.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or a related field.
5+ years of hands-on cybersecurity experience.
Strong knowledge of security frameworks and protocols (e.g., NIST, ISO 27001, SOC 2, CIS).
Expertise in network security, system hardening, and secure coding practices.
Practical experience with SIEM, IDS/IPS, EDR, firewalls, and vulnerability management tools.

Nice To Haves

Industry certifications such as CISSP, OSCP, or GIAC.
Experience with security audits, penetration testing, or participation in red/blue team exercises.
Strong communication skills with the ability to articulate complex security concepts to both technical and non-technical audiences.
Experience in an Electronics Manufacturing environment is a plus.

Responsibilities

Design, deploy, and manage security tools and technologies (e.g., firewalls, SIEM, IDS/IPS, endpoint protection).
Monitor systems and networks for security events, investigate incidents, and lead remediation efforts.
Perform threat modeling, risk assessments, and application security reviews.
Conduct vulnerability assessments and penetration tests to identify and address security gaps.
Develop, implement, and maintain security policies, standards, and procedures aligned with frameworks such as NIST, ISO 27001, SOC 2, and GDPR.
Build and maintain secure cloud and infrastructure configurations (e.g., GCP, Oracle Cloud).
Conduct code and architecture reviews with a focus on security best practices.
Partner with DevOps, IT, and engineering teams to integrate security across the software development lifecycle (DevSecOps).
Stay informed about emerging threats, vulnerabilities, and regulatory updates (e.g., ISO 27001, ITAR, CMMC 2.0).
Deliver security awareness training to internal teams.
Collaborate with compliance, legal, and business stakeholders to support audits and regulatory obligations.