Information Security Engineer 3

About the role

A well-known Financial Services Company is looking for an Information Security Engineer 3 in Irving, TX (Hybrid).

Responsibilities

• Consult on or participate in moderately complex initiatives and deliverables within Information Security Engineering and contribute to large-scale planning related to Information Security Engineering deliverables.
• Review and analyze moderately complex Information Security Engineering challenges that require an in-depth evaluation of variable factors.
• Contribute to the resolution of moderately complex issues and consult with others to meet Information Security Engineering deliverables while leveraging solid understanding of the function, policies, procedures, and compliance requirements. Collaborate with client personnel in Information Security Engineering.
• Operate and mature the Illumio micro-segmentation platform (SaaS with limited on-prem presence), including VEN agent lifecycle management across Windows, Linux, and future AIX workloads.
• Design, validate, and deploy least-privilege segmentation policies, ensuring policy changes can be safely verified via traffic telemetry before and after enforcement.
• Analyze traffic flow telemetry and delay metrics across ingestion pipelines and SIEM tooling to validate platform health, identify regressions, and distinguish policy issues from platform or vendor constraints.
• Lead incident response and vendor escalation with Illumio engineering, including capacity constraints, SaaS scaling events, maintenance windows, and potential data integrity risks.
• Partner with Network Engineering, NOC/NMC, application teams, and platform owners to coordinate production changes, policy deployments, and change-management activities.
• Maintain and evolve security standards, baselines, and deployment guidance for enterprise micro-segmentation, aligning to internal governance, audit, and risk requirements.
• Support large-scale onboarding and migration efforts, including SaaS cutovers, phased policy enforcement, and certification of segmentation controls for high-risk and payment applications.

Requirements

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.
• Hands-on experience with workload-level segmentation and lateral-movement prevention.
• Demonstrated ability to move from visibility to enforcement safely in production environments.
• Strong understanding of VEN agents, SaaS policy engines, enforcement modes, and migration considerations.
• Comfort working directly with vendor engineering teams during live operational issues.
• Strong proficiency with SIEM tools (especially time-based analysis, distributions, and baselining).
• Ability to reason about event ingestion pipelines and end-to-end telemetry delivery.
• Solid Linux and Windows server fundamentals.
• Understanding of application communication patterns, service dependencies, and network flows.
• Experience with production change management and incident response.
• Ability to halt or delay enforcement when telemetry or validation is insufficient.
• Ability to clearly communicate technical risk, impact, and recommendations to engineers, leadership, and vendors.
• Comfortable translating telemetry and failures into executive-level summaries.
• CISSP, CCSP, or comparable security architecture certification.
• Zero Trust–focused training or vendor micro-segmentation certifications.
• Familiarity with Azure and enterprise IAM concepts (SaaS authentication, RBAC, API access).
• Experience integrating segmentation telemetry into SIEM, data lakes, or automation pipelines.
• Exposure to policy certification, audit traceability, or regulatory reporting.

Qualifications

• Not specified.

Skills

• Not specified.

Benefits

• Medical Insurance - Four medical plans to choose from for you and your family
• Dental & Orthodontia Benefits
• Vision Benefits
• Health Savings Account (HSA)
• Health and Dependent Care Flexible Spending Accounts
• Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance
• Hospital Indemnity Insurance
• 401(k) including match with pre and post-tax options
• Paid Sick Time Leave
• Legal and Identity Protection Plans
• Pre-tax Commuter Benefit
• 529 College Saver Plan