Security Engineer

• Lead design and evolution of secure network architecture (on-prem, hybrid, cloud)
• Define and enforce network segmentation, zero trust, and least privilege models
• Configure, manage, and optimize firewalls, WAF, and network security appliances
• Implement and maintain secure VPN connectivity for internal infrastructure access
• Monitor network traffic for suspicious activities and anomalies
• Investigate network security incidents and assist with containment and remediation
• Identify and remediate network infrastructure vulnerabilities
• Secure cloud networking environments including VPC architecture and security groups
• Maintain documentation of network architecture, configurations, and security policies

Infrastructure Security Lead

• - Develop, review, and maintain information security policies, standards, and procedures
• - Ensure alignment with industry frameworks (e.g., ISO 27001, NIST CSF, CIS Controls)
• - Support the implementation and monitoring of security governance programs
• - Drive security awareness initiatives and promote a culture of compliance
• - Conduct risk assessments (enterprise, vendor, application, infrastructure)
• - Maintain and update the organization’s risk register
• - Perform control gap assessments and recommend remediation actions
• - Support third-party/vendor risk management processes
• - Track and report on risk treatment plans and mitigation progress
• - Support compliance with regulatory and industry requirements (e.g., PCI DSS, SOC 2, GDPR)
• - Coordinate internal and external audits, including evidence collection and walkthroughs
• - Monitor compliance posture and track remediation of audit findings
• - Assist in the development of compliance reports and dashboards for management
• - Collaborate with security and IT teams to ensure controls are effectively implemented
• - Assist in incident response from a compliance and reporting perspective
• - Support control testing and continuous monitoring activities
• - Maintain accurate documentation of policies, risk assessments, and control activities
• - Other duties as assigned by the CISO.

See all jobs on JobTailor

Infrastructure Security Lead

Cybersecurity GRC, Governance, Risk & Compliance Analyst