Staff InfoSec Engineer/Remote

Job Description– Staff InfoSec Engineer

Job Title

Staff Information Security Engineer (Staff InfoSec Engineer)

Role Summary

The Staff InfoSec Engineer is responsible for designing, implementing, and maintaining enterprise security solutions to protect systems, networks, applications, and data from cyber threats. This role provides technical leadership in information security initiatives, risk management, security operations, and compliance activities.

Key Responsibilities

• Design and implement enterprise security architecture and controls.
• Monitor, detect, investigate, and respond to security incidents and threats.
• Conduct vulnerability assessments, risk analysis, and security audits.
• Support security operations, SIEM monitoring, and incident response activities.
• Develop and enforce security policies, standards, and best practices.
• Secure cloud, network, application, and infrastructure environments.
• Collaborate with development, infrastructure, and operations teams to integrate security controls.
• Perform security reviews for applications, systems, and third-party integrations.
• Support compliance requirements such as ISO 27001, SOC 2, GDPR, or other regulatory standards.
• Mentor junior security engineers and provide technical guidance.

Required Skills

• Strong knowledge of cybersecurity principles and security engineering practices.
• Experience with network security, endpoint security, IAM, and cloud security.
• Knowledge of SIEM, vulnerability management, and incident response tools.
• Familiarity with firewalls, IDS/IPS, EDR, VPNs, and encryption technologies.
• Understanding of secure software development and DevSecOps practices.
• Experience with scripting or automation using Python, PowerShell, or Bash.
• Strong analytical, troubleshooting, and problem-solving skills.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT.
• Industry certifications such as CISSP, CISM, CEH, Security+, or CCSP preferred.
• Experience with cloud platforms such as AWS, Azure, or Google Cloud Platform is an advantage.

Tools & Technologies

• Security Tools: Splunk, Sentinel, CrowdStrike, Nessus, Qualys
• Cloud Security: AWS Security Hub, Azure Defender
• Networking & Security: Palo Alto, Fortinet, Cisco Security
• Scripting: Python, Bash, PowerShell
• DevSecOps: Jenkins, GitLab, Terraform, Kubernetes