Sr Information Security Specialist

HNTB Corporation • Kansas City, MO

3d

About The Position

At HNTB, this senior individual-contributor role leads the operational execution of complex information security activities that protect HNTB systems, applications, networks, and information. The position is a senior technical resource and escalation point for security incidents, technology implementations, control deficiencies, and other complex security matters. Working within established information security priorities and standards, the specialist coordinates cross-functional technical efforts, improves operational processes, and helps ensure assigned security capabilities are implemented and operating effectively.

The role leads incident investigations and response, supports security technology implementation and operational oversight, coordinates remediation across technology teams, manages security workstreams, and conducts advanced security assessments. It also develops and improves procedures, playbooks, technical standards, automation, monitoring, reporting, and quality-control practices for assigned security activities.

Requirements

• Associate’s degree in Computer Science or a related degree and 8 years of relevant experience, or 10 years of relevant experience in lieu of education.
• Relevant experience in information security and information technology operations.
• Advanced technical knowledge across multiple information security domains and deep expertise in one or more assigned areas.
• Ability to apply security policies, standards, architecture requirements, and management direction to implementations and operational decisions.
• Ability to independently analyze and resolve complex technical, operational, and control-related security issues.
• Ability to communicate complex security matters clearly and provide technical guidance and mentorship as a senior individual contributor.
• Ability to evaluate practical options for meeting security objectives, communicate technical and operational trade-offs, and escalate barriers requiring management decisions.

Nice To Haves

• CEH, CISM, CISSP, GSEC, or CompTIA Security+ certifications or licenses.
• Experience conducting security risk assessments, documenting findings, and recommending practical remediation options.
• Experience with security policy and standards creation, interpretation, and maintenance.
• Demonstrated knowledge of applying system security principles, policies, and regulations.
• Experience implementing, configuring, integrating, and operating enterprise security solutions.
• Experience with one or more of the following solutions: SASE, DSPM, DLP, and/or PAM.

Responsibilities

• Lead investigations and operational responses to complex security incidents, including evidence analysis, containment coordination, remediation tracking, case documentation, and escalation to Information Security management.
• Serve as a senior technical escalation point for security events, vulnerabilities, configuration concerns, control deficiencies, and operational issues that cannot be resolved through standard procedures.
• Lead technical implementation, configuration, integration, testing, and operational transition of security technologies and controls within approved project scope and organizational direction.
• Coordinate complex remediation across infrastructure, applications, cloud services, identity platforms, data environments, vendors, and other technology teams.
• Provide senior operational oversight for assigned security capabilities, including procedures, technical configurations, control execution, metrics, issue management, and continuous improvement.
• Manage security workstreams and technical projects by coordinating activities, dependencies, testing, risks, documentation, communications, and implementation readiness.
• Conduct advanced security assessments of technologies, applications, architectures, configurations, and processes; document findings and recommend practical remediation options to Information Security management and technology owners.
• Develop and improve operational procedures, playbooks, technical standards, automation, monitoring, reporting, and quality-control practices for assigned security activities.
• Perform other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree