Information Security Engineer

One of our favorite clients is actively seeking an Information Security Engineer on a permanent basis.Responsibilities:Develop and enforce security policies, standards, and procedures to ensure adherence to industry regulations and best practices.Lead the design, implementation, and upkeep of enterprise-wide security solutions to defend against cyber threats and attacks.Conduct thorough security assessments and risk analyses to identify and prioritize vulnerabilities and weaknesses in systems and infrastructure.Act as a subject matter expert on security-related technologies, including SIEM, IDS/IPS, firewalls, endpoint security, and encryption.Oversee incident response activities, including threat detection, containment, eradication, and recovery, ensuring timely resolution of security incidents.Collaborate with IT and development teams to incorporate security controls into the software development lifecycle and DevOps processes.Investigate security breaches and incidents, providing detailed reports on root cause and remediation steps.Stay current with industry standards, emerging cyber threats, and best practices, making recommendations to enhance security.Conduct regular assessments and vulnerability scans to identify potential risks and weaknesses.Create and deliver security awareness training sessions for all team members.Participate in all response, recovery, and analysis efforts as needed.Qualifications:Proven experience designing and implementing security solutions in complex environments.Expertise in networking, network protocols, operating systems, and security technologies, with a strong understanding of security principles and best practices.Demonstrated experience with security assessment tools, penetration testing, and vulnerability management.Hands-on experience with cloud security platforms (e.g., AWS, Azure, GCP) and container security technologies.Strong leadership and communication skills, with the ability to effectively collaborate with cross-functional teams and influence stakeholders at all levels.Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly desired.Experience in regulated industries (e.g., finance, healthcare) and familiarity with compliance frameworks (e.g., NIST, PCI DSS, GDPR) is a plus.Does this sound like you? Would you like to hear more details? Apply here!