Senior Information Security Engineer

AD Mortgage•Troy, MI

179d•Onsite

About The Position

We are looking for a hands-on, highly technical Senior Information Security Engineer to design, implement, and maintain our core cybersecurity infrastructure. Serving as a primary technical expert, you will translate high-level security policies into robust system configurations, lead proactive threat detection, and engineer advanced defenses across our cloud, network, and endpoint environments.

Requirements

5+ years of dedicated, hands-on experience in cybersecurity engineering, network defense, or security systems administration.
Deep hands-on expertise configuring market-leading SIEM/SOAR platforms, EDR consoles, Data Governance/DLP modules, and enterprise vulnerability scanners.
Thorough technical understanding of the OSI model, secure tunneling protocols, and practical experience utilizing industry-standard penetration testing tools to audit internal defenses.

Nice To Haves

Technical certifications such as CISSP, CASP+, advanced vendor-specific engineering credentials, or relevant offensive security certifications are strongly preferred.

Responsibilities

SIEM & SOAR Engineering: Configure log ingestion pipelines, write advanced detection queries, analyze system telemetry, and build automated incident response workflows.
Policy Technical Enforcement: Directly translate enterprise Information Security Policies into concrete technical controls, including conditional access matrices, complex firewall rule sets, and secure system baselines.
Data Loss Prevention (DLP) Deployment: Implement, tune, and monitor technical DLP rules to detect, alert on, and block the unauthorized exfiltration of sensitive organizational data.
Endpoint Detection & Response (EDR) Administration: Deploy and manage global endpoint agents, optimize behavioral alerting thresholds, and execute rapid containment protocols during active threats.
Vulnerability Management & Internal Pentesting: Execute credentialed infrastructure and application scans, filter false positives, and coordinate patch validations. Conduct targeted internal penetration testing and exploit validation using standard offensive security suites.
Network Security Mastery: Analyze, configure, and troubleshoot network traffic across Layers 2 through 7 to enforce uncompromised perimeter defense and internal micro-segmentation.
Secure Access & Tunneling: Build, harden, and support secure remote access architectures, managing enterprise IPsec / SSL VPN gateways, certificate lifecycles, and Multi-Factor Authentication (MFA) integrations.
Technical Mentorship: Act as the primary technical escalation point for IT operations and mentor junior administrators on secure engineering principles and alert triage.