Information Security Engineer 3

About the role

The Information Security Engineer III is responsible for evaluating and assessing information security risks, implementing security controls, and collaborating with various teams to ensure compliance with security standards and regulatory requirements.

Responsibilities

• Evaluate and assess information security risks across infrastructure, applications, cloud environments, and enterprise systems.
• Review proposed technology changes and provide recommendations for security controls and risk mitigation strategies.
• Support the implementation, integration, and maintenance of security tools, platforms, and services.
• Analyze firewall configurations, network security controls, and access management solutions.
• Develop, maintain, and support secure applications, APIs, automation scripts, and system integrations.
• Participate in security architecture reviews, governance processes, and security approval boards.
• Investigate security issues, identify root causes, and recommend corrective actions.
• Collaborate with infrastructure, application development, cloud, networking, and business teams to ensure compliance with security standards.
• Assist with vulnerability remediation, risk assessments, incident reviews, and control validation activities.
• Conduct research on emerging technologies, threats, and security trends to support continuous improvement initiatives.
• Support compliance initiatives related to regulatory and industry security frameworks.

Requirements

• 5+ years of experience in Information Security, Cybersecurity, Network Engineering, Software Engineering, Identity & Access Management, or related fields.
• Strong understanding of information security principles including Confidentiality, Integrity, Availability (CIA Triad), Risk Management, Defense-in-Depth, Least Privilege, Zero Trust Architecture.
• Experience working within complex enterprise environments.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills.
• Able to work effectively with cross-functional teams and stakeholders.

Preferred Technologies

• Palo Alto
• Fortinet
• Cisco Security Solutions
• Check Point
• Java
• Python
• PowerShell
• REST API development and integrations
• SQL Server
• Secure software development practices
• Identity & Access Management (IAM)
• LDA
• Active Directory
• Identity Governance Administration (IGA)
• Privileged Access Management (PAM)
• Authentication and Single Sign-On (SSO) solutions
• Cloud & Modern Security
• AWS
• Azure
• Google Cloud Platform (GCP)
• Cloud security controls
• Zero Trust frameworks
• AI security and governance concepts

Benefits

Everforth Apex offers a comprehensive benefits package including medical, dental, vision, life, disability, and other insurance plans, an ESPP (employee stock purchase program), a 401K program with a company match, a Health Savings Account (HSA) on the HDHP plan, a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program, and other discounts. Professional development includes an on-demand training program, access to certification prep and a library of technical and leadership courses/books/seminars, certification discounts and other perks to associations like CompTIA and IIBA. For additional information, refer to the 'Welcome Packet' provided by Everforth Apex. Everforth Apex is committed to providing equal employment opportunities and does not discriminate based on race, color, religion, creed, sex, age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. For ADA accommodations, contact the Benefits Department at [email protected] or 804-523-8228.