Information Security Engineer (contract)

Responsibilities

• Lead and manage computer security incident response activities for highly complex and high-impact events
• Conduct technical investigations and digital forensics to determine root cause and recommend mitigation strategies
• Provide security consulting to internal stakeholders, ensuring alignment with corporate security policies, standards, and best practices
• Design, document, test, and maintain advanced security solutions, including:
• Networking security
• Cryptography
• Cloud security
• Authentication and directory services
• Email and internet security
• Application and endpoint protection
• Analyze and correlate security logs to detect anomalies and support investigations
• Apply subject matter expertise to implement and enhance key information security domains, including:
• Threat identification and modeling
• Risk management
• Monitoring and incident response
• Access management
• Confidentiality, integrity, and availability controls
• Business continuity planning
• Identify vulnerabilities, conduct risk assessments, and evaluate remediation options
• Collaborate with and influence cross-functional teams and leadership
• Lead and mentor a team to successfully achieve security objectives

Requirements

• Applicants must be authorized to work for ANY employer in the U.S.
• This position is not eligible for visa sponsorship.
• Proven Information Security Engineering experience
• Strong experience in incident response, threat analysis, and vulnerability management
• Deep understanding of enterprise security architecture and technologies
• Proven ability to lead projects and influence stakeholders at all levels
• Excellent analytical, problem-solving, and communication skills
• Experience with cloud platforms (e.g., AWS, Azure, GCP)
• Relevant certifications such as CISSP, CISM, CEH, or GIAC
• Experience in security tools such as SIEM, EDR, IDS/IPS, or DLP solutions
• Prior leadership or team management experience