Information Security Engineer Job at Aureon Consulting in Cedar Rapids

One of our favorite clients is actively seeking an Information Security Engineer on a permanent basis.

Responsibilities:

• Develop and enforce security policies, standards, and procedures to ensure adherence to industry regulations and best practices.
• Lead the design, implementation, and upkeep of enterprise-wide security solutions to defend against cyber threats and attacks.
• Conduct thorough security assessments and risk analyses to identify and prioritize vulnerabilities and weaknesses in systems and infrastructure.
• Act as a subject matter expert on security-related technologies, including SIEM, IDS/IPS, firewalls, endpoint security, and encryption.
• Oversee incident response activities, including threat detection, containment, eradication, and recovery, ensuring timely resolution of security incidents.
• Collaborate with IT and development teams to incorporate security controls into the software development lifecycle and DevOps processes.
• Investigate security breaches and incidents, providing detailed reports on root cause and remediation steps.
• Stay current with industry standards, emerging cyber threats, and best practices, making recommendations to enhance security.
• Conduct regular assessments and vulnerability scans to identify potential risks and weaknesses.
• Create and deliver security awareness training sessions for all team members.
• Participate in all response, recovery, and analysis efforts as needed.

Qualifications:

• Proven experience designing and implementing security solutions in complex environments.
• Expertise in networking, network protocols, operating systems, and security technologies, with a strong understanding of security principles and best practices.
• Demonstrated experience with security assessment tools, penetration testing, and vulnerability management.
• Hands-on experience with cloud security platforms (e.g., AWS, Azure, GCP) and container security technologies.
• Strong leadership and communication skills, with the ability to effectively collaborate with cross-functional teams and influence stakeholders at all levels.
• Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly desired.
• Experience in regulated industries (e.g., finance, healthcare) and familiarity with compliance frameworks (e.g., NIST, PCI DSS, GDPR) is a plus.

Does this sound like you? Would you like to hear more details? Apply here!