Security Engineer- Identity (remote)

Role overview

The Security Engineer – Identity protects Hallmark’s information systems by ensuring confidentiality, integrity, and availability. You’ll defend against cyber threats, mitigate vulnerabilities, secure authentication/access, and help maintain compliance with security regulations and industry standards.

Responsibilities

• Design, build, and implement identity-focused security measures to ensure secure access and authentication
• Defend against cyber threats and mitigate vulnerabilities
• Respond to security incidents
• Maintain confidentiality, integrity, and availability of information systems
• Support compliance with security regulations and standards (e.g., NIST, ISO 27001, CIS Controls)

Basic qualifications

• Bachelor’s degree or 4 years of professional work experience
• Experience with security tools/technologies such as:
  • Firewalls, zero trust solutions, antivirus
  • Vulnerability scanning tools
  • Access management and authentication/authorization tools
  • Privileged access management
  • Security for SAP systems
• At least 4 years of information security experience with security operations, incident response, and threat analysis
• Familiarity with security frameworks/standards: NIST, ISO 27001, CIS Controls
• OR: 4 years in Identity and Access Management
• OR: 4 years in SAP Security
• Experience handling moderately complex issues and escalating complex issues as needed

Preferred qualifications

• Degree in Cybersecurity, Information Security, Computer Science, or related field
• Security certifications such as CISSP, CISM, CCSP, OSCP, CIAM
• Working knowledge of identity and access management
• Cloud security platform experience (AWS, Azure, Google Cloud)
• Scripting/programming for automation/security tooling (Python, PowerShell, Bash)
• Experience with SIEM, EDR/advanced threat protection (ATP)
• Strong understanding of:
  • Least-privileged access
  • SSO and MFA and applying them to a zero-trust model
  • Privileged access management to limit access and risk
  • SAP security across S/4HANA, HANA, ECC, SCM, CRM, etc.

Additional details

• Remote role based in the U.S. (not eligible from Alaska, Hawaii, Puerto Rico, or outside the U.S.)
• Salary range: $100,000–$110,000 (final compensation varies).