Apply on Employer Site

vMOX · 2 days ago

Information Technology Security Engineer

United States

Full-time

Remote

Mid Level

$95K/yr - $110K/yr

3+ years exp

vMOX is seeking a detail-oriented, highly motivated IT Security Engineer to protect their organization's digital assets and infrastructure. This role involves implementing and maintaining security protocols, monitoring systems for vulnerabilities, and responding to security incidents to ensure the confidentiality, integrity, and availability of information systems.

Enterprise SoftwareSoftwareTelecommunicationsWireless

Responsibilities

Develop and maintain the internal audit program (1–3 year cycle) that defines frequency, scope, criteria, methods, and responsibilities; prioritize areas based on risk and results of previous audits

Prepare audit plans, conduct document reviews, interviews, observation and sampling; test controls and collect objective evidence

Produce formal audit reports (conformities, nonconformities, opportunities for improvement) and report results to relevant management; verify corrective actions and retain documented evidence of implementation and outcomes

Monitor networks and systems for security breaches, threats, and anomalies

Conduct regular vulnerability assessments and penetration testing

Develop and enforce security policies, procedures, and best practices

Support incident response: investigate, escalate alerts, coordinate containment, recovery, remediation, and documentation

Maintain up-to-date knowledge of the latest cybersecurity trends, threats, and technology solutions

Lead in compliance efforts (e.g., ISO 27001:2022, SOC2)

Plan, execute, and report on security audits for systems, networks, and applications

Provide security awareness training to employees

Collaborate with IT and business units to ensure secure system design and implementation

Take ownership of evaluation and implementation of security technologies and tools

Collaborate with leadership to align security initiatives with business objectives

Identify opportunities for improvement and proactively implement solutions

Take ownership of all system patching and compliance for: Windows Servers, Linux Servers, Windows Laptops

Administration of all security related tool such as: Splunk, Wazuh, Nessus, SentinelOne, 1password, AppGate SDP, Intune, and Windows Defender, AWS, Azure/Office 365, etc

Qualification

IT security experienceSecurity technologies knowledgeIncident response experienceSecurity certificationsRegulatory compliance knowledgeSecurity tools proficiencyCloud security experienceAnalytical skillsScripting knowledgeDevSecOps familiarityITIL familiarityProblem-solving skillsDocumentation skillsCommunication skills