Information Systems Security Engineer

About the role

As an Information Systems Security Engineer at Bamboohr, you will play a crucial role in safeguarding our information systems and ensuring compliance with security standards. This position requires a proactive approach to identifying vulnerabilities and implementing robust security measures. You will collaborate with cross-functional teams to enhance our security posture and protect sensitive data from potential threats. Your expertise will be vital in developing and maintaining security protocols that align with industry best practices.

Key facts

What you'll do

• Design, implement, and manage security systems and protocols to protect sensitive information from unauthorized access and cyber threats.
• Conduct thorough risk assessments and vulnerability analyses to identify potential security weaknesses in our infrastructure.
• Develop and enforce security policies and procedures to ensure compliance with regulatory requirements and industry standards.
• Collaborate with IT and development teams to integrate security measures into the software development lifecycle.
• Monitor security alerts and incidents, responding promptly to mitigate risks and ensure minimal disruption to operations.
• Conduct security awareness training for employees to promote a culture of security within the organization.
• Stay current with emerging security threats and technologies, recommending updates to security practices as necessary.
• Prepare detailed reports on security incidents, vulnerabilities, and compliance status for management and stakeholders.
• Participate in security audits and assessments, providing insights and recommendations for improvements.
• Assist in the development of disaster recovery and business continuity plans to ensure data integrity and availability.
• Collaborate with external vendors and partners to enhance security measures and share best practices.
• Engage in continuous professional development to maintain up-to-date knowledge of security trends and certifications.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 5 years of experience in information security, with a focus on systems security engineering.
• Strong understanding of security frameworks and standards such as NIST, ISO 27001, and CIS Controls.
• Proficiency in security tools and technologies, including firewalls, intrusion detection systems, and encryption methods.
• Experience with risk assessment methodologies and vulnerability management tools.
• Knowledge of network protocols and security architectures, including TCP/IP, VPNs, and secure network design.
• Familiarity with regulatory compliance requirements such as GDPR, HIPAA, and PCI-DSS.
• Excellent problem-solving skills and the ability to work under pressure in a fast-paced environment.
• Strong communication skills, both written and verbal, to effectively convey security concepts to technical and non-technical stakeholders.
• Relevant security certifications such as CISSP, CISM, or CEH are highly desirable.

Nice to have

• Experience with cloud security and securing cloud-based applications and services.
• Familiarity with DevSecOps practices and integrating security into CI/CD pipelines.
• Knowledge of programming or scripting languages such as Python, Java, or PowerShell for automation of security tasks.
• Previous experience in a government or defense contracting environment is a plus.
• Understanding of incident response and forensic analysis techniques.

Skills & tools

• Proficient in security information and event management (SIEM) tools, such as Splunk or ArcSight.
• Familiarity with endpoint protection solutions and malware analysis tools.
• Experience with identity and access management (IAM) solutions.
• Knowledge of data loss prevention (DLP) technologies and practices.
• Strong analytical skills to assess complex security issues and develop effective solutions.

Practical notes

• This position is based in Linthicum, Maryland, and may require occasional travel for training or conferences.
• Candidates must be eligible to work in the United States and may need to undergo background checks as part of the hiring process.
• Bamboohr values diversity and encourages applications from individuals of all backgrounds.

META

Company: Bamboohr

Title: Information Systems Security Engineer

Listed

location: Linthicum, Maryland

Job type: Full-time