IT Security Senior Engineer (Hybrid)

We are a Firm where people truly believe in what they do and strive to achieve the highest standards of performance and success.

General Description:

The IT Security Senior Engineer will be responsible for maintaining and elevating the security across H&K environments. The incumbent in this role will reduce the security risks while allowing the Firm to operate quickly, safely, and efficiently. This is a hands-on role that will assist the IT Security Engineering Manager in defining, designing, and implementing security solutions across the Firm’s cloud infrastructure. This position will work in conjunction with other IT Teams to enhance system security and protect Firm data and technical assets.

Key Responsibilities and Essential Job Functions:

• Identify and resolve security issues across the cloud infrastructure.

• Build, deploy, and manage security tools, firewalls, and services.

• Design and implement scalable processes to provision cloud access.

• Maintain a low-touch, reliable, and user-friendly infrastructure.

• Evaluate and respond to alerts and events from security tools.

• Tune security tool configuration to minimize false positives.

• Develop event response documentation and processes, including diagrams for system environments, operations, and security tools.

• Collaborate with security leadership, engineering, and compliance to execute security strategies.

• Assist other teams in solving security issues in a manner that complies with business requirements and best practices.

• Assess our current cloud security and propose improvements or solutions.

• Review our architecture and design through a security lens to provide actionable, timely requirements and recommendations.

• Serve as a subject matter expert for security tools, applications, and processes.

• Provide periodic “on-call” support of security operations during non-business hours.

• Approaches all problems, projects, and incidents with a high level of professionalism, objectivity and an open mind to new ideas and solutions.

• Analyzes and identifies areas where automation can be used in the deployment of new technology to support effective resource management.

• May lead projects and provide guidance/training to less experienced staff.

• Provide technical expertise and support to clients, IT management, and staff in the implementation of security/protection technologies in relation to network, systems, and applications.

• Function as a security expert resource (SME) to management and staff in all phases of the development and implementation of projects.

• Review change requests from a security perspective, understand and determine associated risk levels and make recommendations for approval or denial based on the risk presented.

• Ability to understand, prioritize and complete tasks by working independently or in a team.

• Special project and duties as assigned.

Required Skills:

• Effective communication and collaboration skills.

• Strong analytical problem-solving skills.

Required Qualifications & Education:

• Bachelor’s degree in computer science, information security, or information security.

• 5+ years of experience working with a public cloud infrastructure.

• Experience deploying and customizing security tools such as vulnerability scanners, static analyzers, IDS/IPS, firewalls, and endpoint security monitoring.

• Experience using CI/CD pipelines for change management and automated security testing.

• Experience with networking and Windows/Linux servers.

• Experience scripting with PowerShell and Python.

• Experience with log management and/or correlation systems.

• Fluent in one or more programming or scripting language.

• Thorough understanding of cloud and network security.

• Knowledge of networking and web protocols.

• Knowledge of modern cloud technology components and deployment patterns.

Preferred Qualifications & Education:

• 8+ years of experience working in an information security role.

• Experience deploying services in a multi-cloud environment.

• Relevant Microsoft Azure and/or AWS certifications.

Physical Requirements:

• Ability to sit or stand for extended periods of time.

• Moderate or advanced keyboard usage.

Benefits: Our goal is to promote a work environment in which individuals have ac