What You’ll Bring to The Team:

We seek a passionate Information Security Engineer to help build and enhance our Information Security technology capabilities. As part of a growing Information Security team within Florence, you will play a vital role in the initiatives to reduce security risk by building and improving upon our security technologies.

You will: 

• Perform implementation, configuration, troubleshooting, and ongoing maintenance of all security technologies for the protection of endpoints, systems, accounts, and data
• Perform vulnerability management including identifying, prioritizing and managing vulnerabilities for their entire lifecycle from identification to remediation
• Provide continuous improvement of security controls across the infrastructure including the vulnerability management and patching program
• Assist with incident response processes including monitoring and responding to system alerts, responding to reported security incidents, and participate as a member of the incident response team
• Perform internal audits of systems and processes to ensure they adhere to company policy as well as industry standards and best practices
• Assist with the development and documentation of security policies and procedures necessary to mitigate risk and align with industry standards, regulations, and best practices.
• Support the selection, design, and implementation of security controls necessary to mitigate risk based on risk assessment findings
• Participate in the identification, creation, and/or collection of reporting metrics
• Develop strong and meaningful relationships across all departments of the organization

An Ideal Candidate has:

• Bachelor's degree from accredited university and a minimum of 2 years of related experience. 
• Hands on experience with security technologies including vulnerability management software, endpoint security, DLP, firewalls, IPS, SIEM
• Experience in incident investigation, incident analysis including log and raw data analysis, and incident response
• Knowledge of networking fundamentals and TCP/IP communications
• Ability to communicate technical and security-related concepts to a broad range of technical and non-technical staff, security vendors, consultants, and senior management.
• Ability to research, problem solve, and be self-sufficient 
• Ability to thrive in a fast-paced, technical, and mission-focused environment.
• Ability to multi-task and track many simultaneous initiatives
• Must be tactful, detail-oriented, and able to comprehend technical and regulatory requirements

Bonus Points if you have:

• Industry certifications such as Security , CCNA, CEH, GSEC, GCIH, or CISSP
• Experience in AWS, threat intelligence, cloud security, and web application firewalls 
• Detailed knowledge and understanding of encryption, authentication, and identity and access management 
• Developer or scripting experience
• Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO27001, CIS Controls
• Understanding of regulatory requirements such as HIPAA, GDPR, CCPA