Information Security Engineer

Waltham, MA

Full-time

Onsite

Entry, Mid Level

TalentAlly is seeking an Information Security Engineer who will work on configuring multiple security systems and respond to security alerts. The role involves architecting IAM best practices, collaborating with engineering teams for secure infrastructure, and automating security controls.

Apply Now

Responsibilities

Architect and implement IAM best practices that enables engineers to move quickly while ensuring security, compliance and auditing requirements are met.
Collaborate with engineering teams to ensure secure infrastructure architecture
Respond to alerts for security systems such as firewalls, IPS/IDS, SIEM, EDR, WAF, threat and vulnerability management tools working with teams to understand and remediate security vulnerabilities
Design and implement threat detection and threat prevention across a multi-account, multi-region AWS setup.
Provide subject matter expertise on information security architecture and systems engineering to other IT and business teams
Automate security controls, data access patterns and processes to provide improved metrics and operational support for engineering teams.
Participate in 24x7 on call rotation and assist in resolving issues outside normal business hours.

Qualification

Required

Engineering bachelor's degree
1-3+ years security engineering experience
1-3+ years scripting skills in any modern programming language
1-3+ years ability to deploy, configure, and utilize monitoring and threat detection services, such as Guard Duty, Cloud Custodian, Control Tower, Security Hub etc.
1-3+ years communicating technical concepts to peers and non-technical persons respectfully and clearly

Preferred

Experience with AWS security best practices, especially the Well Architected Framework with emphasis on the security pillar
Ability to create, manage, and deploy infrastructure-as-code using Terraform or CloudFormation
Strong knowledge of Linux based operating systems and security fundamentals
Skilled at implementing secure, public facing AWS Cloud based systems
Ability to securely configure and manage AWS services such as CloudTrail, IAM, Route 53, S3, RDS, et al
Experience implementing security controls for AWS environments, including setup and management of authentication controls, VPN's, KMS, AWS network controls and configuration, etc.