Overview:

Growing company disrupting the manufacturing and industrial space via technology, is looking for their first Information Security Engineer to join their team out of their Kalamazoo, MI, Nashua, NH or New Kensington, PA location!

Responsibilities:

• Analyze systems and networks for compliance with DFARS and industry best practices security configuration requirements.
• Implement and validate administrative and technical security controls.
• Manage and maintain DFARS compliance in accordance with NIST SP 800-171 and CMMC 2.0 requirements.
• Work with IT personnel to identify, prioritize, and close gaps within existing network architecture and system configurations.
• Work with VP, IT & Security to prepare and manage Information Assurance documentation including System Security Plans (SSPs) and Plans of Action & Milestones (POA&M).
• Fully leverage Microsoft Sentinel, increasing observability and monitoring, responding to, and tuning alerts.
• Participate in root cause analysis on security incidents and provide recommendations for containment and remediation.
• Work with VP, IT & Security to identify skills gaps and build the Security function.
• Lead Business Impact Assessment and other Business Continuity Planning activities with key partners across the company.
• Manage audit, vulnerability and patch management, and security awareness training programs.
• Work with VP, IT & Security to develop, monitor, and report Key Performance Indicators (KPIs).
• Evangelize information security and foster a security culture.

Qualifications:

• Minimum of 3-5 years’ security experience, including control recommendation, audit, aligned or compliant with an established framework (e.g., CIS, ISO 27001, NIST SP 800-171/800-53).
• Bachelor's degree in Information Security (or related field) and/or relevant certifications (e.g., Security , CRTP, CISSP, CISA, CCP, GIAC) preferred.
• Background administering and/or securing Windows, Linux, and cloud providers (e.g., AWS, Azure).
• Background supporting security and compliance initiatives in the manufacturing and/or defense industries preferred.
• Experience with Microsoft 365 Security and Compliance tools and Azure Sentinel strongly preferred.
• Familiarity with NIST SP 800-171 and other 800-series publications preferred.

Next Steps:

Do you want to be the first Security Engineer to for a growing infrastructure technology company? Send your resume, along with your application, and let's chat!