Security and Compliance Engineer

Job Title: Security and Compliance Engineer

About the Role:
We are seeking a Security and Compliance Engineer to own the design, implementation, and management of security controls across client IT environments. This role focuses on protecting cloud, on-premises, and hybrid systems while supporting regulatory compliance, audits, and incident response. The engineer will collaborate with internal teams and clients to strengthen security posture and ensure operational resilience.

Responsibilities:

• Design and implement security architectures across cloud, on-prem, and hybrid environments.

• Manage and optimize security tools, including endpoint protection, firewalls, multi-factor authentication, SIEM, and monitoring solutions.

• Conduct vulnerability assessments, risk reviews, and compliance gap analyses.

• Develop and maintain security policies, procedures, and documentation.

• Lead incident response efforts, including threat investigation, containment, and remediation.

• Provide guidance and training on security best practices to clients and internal teams.

• Collaborate with operations and IT teams to ensure secure system integration.

• Continuously improve security processes, tools, and response capabilities.

Requirements:

• 4+ years of experience in cybersecurity engineering or IT security operations.

• Hands-on expertise with cloud platforms (AWS, Azure, GCP) and on-premises environments.

• Experience managing security controls, monitoring, and incident response.

• Strong knowledge of risk management, regulatory frameworks, and best practices.

• Excellent troubleshooting, analytical, and communication skills.

• Ability to work independently and collaboratively across multiple teams.

• Nice to have: industry certifications (CISSP, CISM, CompTIA Security+, GIAC, ISO 27001) or experience in regulated industries.

What We Offer:

• Competitive salary and performance-based incentives.

• Comprehensive benefits package, including medical, dental, vision, and 401(k) with company match.

• Professional development support, including training and certification opportunities.

• Hybrid-friendly, collaborative work environment with exposure to diverse client systems.

Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual’s skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company’s 401(k) retirement plan.