Information Security Engineer

Role Overview

Information Security Engineer (individual contributor) responsible for the deployment, integration, and operationalization of an enterprise Threat and Vulnerability Detection Platform. The role emphasizes enterprise-wide visibility, solid interpersonal skills, and ongoing improvement of threat and vulnerability detection capabilities.

Primary Responsibilities

• Deploy and integrate the Threat and Vulnerability Platform across the enterprise.
• Integrate security platforms with tooling such as SIEM, XDR, and reporting.
• Deploy, implement, and manage security controls to safeguard infrastructure, systems, and data.
• Perform vulnerability assessments and audits to support compliance with FedRAMP and NIST.
• Collaborate with cross-functional teams to identify security requirements and develop solutions.
• Develop and maintain security documentation (policies and procedures).
• Stay current with emerging threats and technologies; provide recommendations for continuous improvement.
• Review, test, and configure scanning and reporting results for key stakeholders.
• Mentor and guide junior security engineers and other team members.

Required Qualifications

• High School Diploma/GED.
• 4+ years remediating vulnerabilities on Tenable VM servers.
• 4+ years responding to ad-hoc scanning requests and conducting false positive investigations / assessing vulnerability risk.
• 4+ years reviewing scan results (successful/unsuccessful and potential results).
• 4+ years cloud security concepts.
• 2+ years maintaining and utilizing Tenable VM software and infrastructure.
• US Citizenship required due to FISMA.

Preferred Qualifications

• General network concepts; Windows and Linux operating system administration.
• Scripting, automation, and AI integrations.

Remote Policy

• Remote (work from anywhere within the U.S.).