Senior Information Security Engineer

Poppulo is seeking a Sr. Information Security Engineer to join their security team. The role involves implementing preventive, detective, and response controls to protect company assets. The Senior Information Security Engineer will be responsible for incident response, threat identification, analysis, and remediation. They will also contribute to the development and maintenance of business continuity planning, data, systems, and network security. This position reports to the Sr. Director of Information Security Operations and requires expertise in information security risk assessments and frameworks.

Develops and implements security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, and web-based systems.

Reviews security violation reports or logs, investigates possible security exceptions and coordinates with internal teams or external agencies as needed.

Planning, implementing, and managing security measures to protect the organization's information systems and networks

Monitoring security systems to identify and respond to potential security incidents

Staying up to date with the latest cybersecurity threats and technologies

Developing and implementing security policies and procedures

Providing training and support to end-users on security best practices

Responding to security incidents and leading incident response efforts.

Managing Endpoint detection and response (EDR) platform.

Analyzing Emails for spoofing, reading and understanding email headers and maintains email gateway security controls

Oversee Identity and Access Management (IAM) operations

Perform real-time detection, analysis, and response to threats via an EDR tool

Analyze attacks and trends facing the organization to better define proactive defensive measures

Anticipates and prevents problems and roadblocks before they occur.

Provides subject matter expertise when needed

Analyze and correlate data in order to identify issues, trends, or exceptions to drive improvement of results and find solutions.

Perform initial analysis and investigation into security alerts in security monitoring consoles.

Researches and evaluates cybersecurity threats and performs root cause analysis.

Mentor associate-level security personnel.

Other responsibilities, as required.

• Bachelor's degree in Computer Science, Information Systems, related field or equivalent experience
• One or more security-based certifications preferred; such as CISSP, Security +, GCIH and/or ethical hacking certifications
• 5+ years' experience in some form of information security discipline; specialization in information security risk assessments and frameworks preferred
• Experience with the NIST and ISO 27001/2 security frameworks
• Experience with the participation of SOC-based independent audits a plus
• Specialization in risk frameworks and formulating a risk management program preferred
• Ability to facilitate a secure software development lifecycle that includes threat modeling and application vulnerability scanning
• A background in secure software engineering a plus
• Ability to clearly and confidently explain complex technical issues in simple and understandable terms
• Self-starter with strong written and oral communication skills
• The ability to work in an environment that presents tight timelines and high expectations
• Must be able to adapt quickly to ever-changing requirements and priorities
• IT experience and understanding of common devices, equipment, environments, network diagrams & systems
• Familiar with MS office products/VISIO
• Ability to effectively network, participate in and lead matrixed teams, and develop key working relationships
• Working knowledge of systems administration for Linux and Windows-based platforms
• Basic knowledge of database administration and SQL a plus
• Basic knowledge of Amazon AWS administration a plus

• Flexible PTO and 10 days paid leave
• Competitive compensation package
• Potential for career advancement in a fast-paced growing organization
• Competitive Medical, Dental, and Vision Benefits and Monthly contributions to your Health Savings Account
• 401k with Employer Match
• Fun, flexible working environment
• Maternity, Parental, Adoption and Bereavement Leave. Funding towards adoption costs.
• Life Insurance