Information Technology_USA - USA_Senior Security Engineer

Real Soft • Jacksonville, FL

9d • Onsite

About The Position

This role focuses on enhancing and maintaining the security posture of our IT infrastructure. The Senior Security Engineer will be responsible for a wide range of security functions, including threat monitoring, vulnerability management, incident response, access control, data protection, security architecture, risk assessment, compliance, and employee training. The goal is to proactively identify and mitigate security risks, ensuring the confidentiality, integrity, and availability of company and customer data.

Requirements

• SIEM
• EDR
• Network monitoring
• Endpoint monitoring
• Cloud environment monitoring
• Vulnerability identification
• Vulnerability remediation
• Software security
• Hardware security
• Network security
• Incident investigation
• Breach response
• System isolation
• Operational recovery
• Downtime minimization
• Multi-Factor Authentication (MFA)
• Role-Based Access Control (RBAC)
• Identity Management
• Access Control
• Encryption protocols
• Data Loss Prevention (DLP)
• Data protection in transit
• Data protection at rest
• Network infrastructure security
• Firewall implementation
• Security architecture
• Defensive security controls
• Risk assessment
• ISO 27001
• GDPR
• Security audits
• Regulatory compliance
• Cybersecurity best practices
• Phishing awareness
• Secure password hygiene
• Employee security training
• Cyber Security

Responsibilities

• Continuously scanning networks, endpoints, and cloud environments for suspicious activity using advanced tools like SIEM and EDR.
• Proactively identifying and patching weaknesses in software, hardware, and networks before malicious actors can exploit them.
• Investigating breaches in real time, mitigating damage, isolating compromised systems, and restoring operations to minimize downtime.
• Ensuring only authorized personnel have access to sensitive information by implementing multi-factor authentication (MFA) and strict role-based access controls.
• Safeguarding sensitive company and customer data both in transit and at rest using robust encryption protocols and data loss prevention (DLP) tools.
• Designing and implementing secure network infrastructures, firewalls, and defensive layers tailored to the business's risk tolerance.
• Evaluating the organization against industry standards (e.g., ISO 27001, GDPR) and conducting regular audits to ensure regulatory adherence.
• Educating staff on cybersecurity best practices such as recognizing phishing scams and applying secure password hygiene to reduce the risk of human error.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed