Senior Information Security Engineer

Trulieve

3d•Remote

About The Position

The Senior Information Security Engineer is responsible for leading the development of information security strategies and ensuring that technology initiatives are executed in alignment with Trulieve’s security standards and frameworks. In this role, the individual helps oversee and secure the company’s network infrastructure. Responsibilities include shaping and supporting security measures, monitoring network activity, and responding to incidents as needed. Experience with the Cisco Security Suite and CCNA certification are highly valued for this position. In this capacity, the Lead Information Security Engineer serves as a security point of contact for business stakeholders and plays a pivotal role in advancing Trulieve’s Information Security program. This includes the strategic design and implementation of robust security technologies across the organization’s network.

Requirements

Bachelor's Degree – Computer Science, Engineering, Information Technology, or related discipline, or equivalent work experience.
Have 6+ years of experience in Information Security implementing security best practices, architecture, vulnerability assessments, and overall security management.
Experience with networking technologies (routing, switching, firewalls, VLANs, subnets, etc.)
Demonstrated ability to support and maintain critical security infrastructure, ensuring hardware and software are properly managed to prevent and mitigate security incidents.
Possess one of the certifications such as CCNA, CCNP, CCIE, CISSP, or equivalent network and security engineering experience.
Demonstrated experience overseeing the installation, configuration, and deployment of security solutions, with responsibility for end-to-end project management.
Experienced in developing, implementing, and supporting security controls and configurations for various platforms.
Have experience and familiarity with security controls and configurations in a cloud environment such as Azure, AWS, and/or GCP.
Self-motivated and capable of working effectively with minimal supervision.
Can build professional relationships and have excellent communication skills.
Have a strong customer-focused mindset.

Responsibilities

Lead security projects and work closely with other engineers, architects, and vendors to design secure, highly available production environments.
Excel in a highly dynamic environment by rapidly adapting to technological changes and delivering prompt, well-considered solutions with minimal supervision.
Demonstrate results-oriented and practical problem-solving expertise.
Apply network security experience, document the current state of security controls, perform gap analysis and create a target state for enterprise-wide network security.
Identify and address security weaknesses in the network, including hardware and software vulnerabilities.
Present and explain complex technical issues to junior team members, colleagues, and management.
Work with IT and Security leadership and cross-functional business teams to develop strategies and plans to enforce security requirements.
Proactively identify and address security risks as part of the role’s core responsibilities.
Exercise strong organizational skills and problem-solving expertise when working with current and emerging technologies.
Monitor network traffic for suspicious activity, detecting and responding to security incidents, and performing incident analysis.
Serve as security subject matter expert across multiple technologies and ensure they align with the company security requirements.
Participate in the security strategic planning process.
May supervise staff indirectly in a project setting, to ensure effective and timely completion.
Establish and manage appropriate business relationships.
Implement security policies and assist with policy creation.
Incorporate the company's strategic goals with ongoing initiatives.
Lead security solution planning and delivery on projects.
Answer technical and procedural questions from customers and less experienced team members.
Keep abreast of the latest security threats, vulnerabilities, and best practices.
Perform additional security tasks as assigned, such as assessments, compliance initiatives, documentation and other.