Role Description We are looking for an experienced and knowledgeable Information Security Engineer (Tier 3) to join our team! As an Information Security Engineer, you will be responsible for planning, implementing, and managing the overall security strategy for our managed customers. The ideal candidate should have strong understanding of cloud native SIEM solutions, Endpoint and Network security tools and compliance requirements. - Work closely as part of the team, and be independent to handle incidents, and drive incidents to resolution as well as learning and improving from them. - Collaborate with colleagues on various security projects and contribute towards best practices of processes, technology used and overall security awareness. - Maintain a teamwork mentality, working closely with colleagues on projects, learning from and supporting each other. - Maintain and improve the security technologies deployed, including creating use cases, customizing, or better configuring the tools based on past and current threats. - Adopt a quality service approach, proactively pointing out possible issues, providing detailed reporting, and staying available for support until an issue is resolved. - Be detail-oriented and flexible-minded to contribute to the 24/7 defensive capabilities of the SOC for the overall security of the organization and customers. - Exhibit curiosity, problem-solving mentality, and a keen interest in growing in the security area. - Analyze logs (from Security Information & Event Management system) and other sources to create reports and better prepare for suspicious events or malicious efforts. - Have solid experience working in a SOC environment, with a good understanding of network & application security and vulnerability management. - Possess good communication skills to interact with colleagues locally and internationally from both technical and non-technical backgrounds. - Perform penetration testing, vulnerability scanning, and manage and track remediation of identified vulnerable systems. Qualifications - 5+ years of Information Security experience - Working experience with integration with different security systems and devices - 2+ years coding and scripting experience in Python, Linux shell scripting or Windows Powershell scripting - Working experience and knowledge of SOAR platforms and solutions - 2-4 years of systems analysis - Working knowledge of Linux and syslog from CLI - Experience with computer network/application penetration testing and techniques - Proven ability and experience performing moderately complex security analysis for information technology - Excellent writing and communications skills in English - Familiarization with a variety of information and network security tools (Azure Sentinel SIEM, QRadar SIEM, Splunk, McAfee Security Suite, Cisco IDS/IPS, Tenable Nessus, and Palo Alto, among others) - Familiarization with a variety of Network Access Control software (Cisco ISE, ForeScout, etc.) - SQL or KQL knowledge is considered an advantage - Operational knowledge of API is considered an advantage Education Preferred - Bachelor's degree in computer information systems or related field Industry Certifications - Certified Information Systems Security Professional (CISSP) - Information Systems Security Engineering Professional (CISSP-ISSEP) - Systems Security Certified Practitioner (SSCP) - CompTIA Security+ - Certified Ethical Hacker (CEH) - Certified Security Analyst (ECSA) - Certified Incident Handler (ECIH) - CompTIA Cybersecurity Analyst (CSA+) - Information Technology Infrastructure Library (ITIL) - Cisco CCNA - Cisco CCNP + Security - MCSE - Linux+ Shift - Monday - Friday 8 AM - 5 PM CT, US Business hours (Central) with on-call participation. The shift may be rotated/changed based on support coverage requirements.

• Proactively manage security functions on WordPress-based websites, including security updates, to maintain a hardened environment. • Monitor centralized server logs, Web Application Firewalls (WAF), and malware alerts to identify and neutralize threats before they escalate. • Act as the primary internal point of contact during website product security incidents, driving containment, remediation, and thorough post-mortem analysis • Develop and enforce a "Security Gold Standard" checklist for all new site launches and third-party integrations. • Translate complex technical logs and security posture data into actionable insights for leadership teams. • Coordinate with internal stakeholders to provide transparent updates and guide client-facing teams on sensitive security communications.

• Design, implement, and maintain security controls across cloud infrastructure (AWS/GCP), CI/CD pipelines, and internal systems • Lead application security efforts: threat modeling, secure code review, and integrating SAST/DAST tooling into the development lifecycle • Own vulnerability management — triage, prioritize, and drive remediation of findings from scans, pen tests, and bug bounty reports • Monitor for and respond to security incidents; build and maintain incident response runbooks • Manage identity and access controls (SSO, RBAC, least-privilege enforcement) across internal and customer-facing systems • Support customer security questionnaires, audits, and certifications (e.g., SOC 2, ISO 27001) • Partner with engineering teams to embed secure-by-design practices into new features and services • Evaluate and implement security tooling (secrets management, endpoint protection, cloud security posture management) • Educate the broader team on security best practices and champion a security-first culture

• Lead Product Security and Cloud Security initiatives from design through operation • Influence architecture and product decisions, embedding security from development through production • Protect applications, APIs, and AWS environments, balancing security, performance, and availability • Proactively identify and mitigate risks, prioritizing automation and scalability • Serve as a technical reference for engineering teams, promoting best practices and reducing friction in the SDLC • Continuously evolve the security posture for cloud, applications, and generative AI • Define and operate protection strategies for applications and APIs using WAF/WAAP (preferably Azion) • Lead API security efforts, mitigating risks described in the OWASP API Security Top 10 • Improve AWS security posture using CSPM/CNAPP (Wiz or similar), Security Hub, GuardDuty, Inspector, and other native services • Develop automations for vulnerability remediation and security processes • Integrate security into the SDLC through threat modeling, security reviews, and AppSec practices • Define controls for the safe use of AI in engineering and products • Support incident response, technical documentation, and risk indicators