Information Security Engineer III
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Must not repeat job title. No Job ID etc. Remove boilerplate. Must preserve all substantive info.
We need to parse the posting.
Key sections:
- About the role / purpose: The "PURPOSE OF THE JOB" paragraph. Could be "About the role". We'll put that as About the role
with
containing purpose description. - Responsibilities: The "Essential Duties And Responsibilities" with subcategories: Monitoring, Detection, and Incident Support; Cloud & Generalist Security Responsibilities; Security Architecture, Standards, and Risk; Collaboration and Enablement; Data and AI Security. We'll combine into a
- list. Need to preserve all details. Might be long; we can break into multiple
- items each covering a bullet. The original text includes sentences; we can split by periods? But we need to preserve all substantive info, not summarize. Could create
- for each duty sentence. Let's extract. From text: Essential Duties And Responsibilities Monitoring, Detection, and Incident Support Monitors cloud, on-prem, and SaaS environments for security threats using SIEM, EDR, cloud-native logging, and network telemetry.Assists with security incident response activities, including investigation, containment, remediation, and post-incident analysis.Researches and implements methods to remediate network and application security vulnerabilities.Leads and participates in security architecture controls reporting, compliance audits, monthly and ad-hoc statistics and trends, and risk-focused reports including internal and 3rd party Risk Assessments.Produce risk-focused security findings and communicate clearly with technical and non-technical stakeholders.Conducts threat hunting and root-cause analysis to identify anomalous behavior, exploitation attempts, and indicators of compromise.Investigates potential data misuse, data exfiltration, and anomalous access patterns using logs, DLP, and monitoring tools. Cloud & Generalist Security Responsibilities. Prepares and analyses system security reports by collecting, analyzing, and summarizing data and trends and makes recommendations to improve security.Serve as a senior technical contributor across cloud security, including IAM, logging, monitoring, detection, and secure deployment patterns.Lead or contribute to vulnerability management across cloud infrastructure, applications, containers, and data platforms.Participate in offensive and defensive security activities, including threat modeling, red team exercises, blue team detection improvements, and threat hunting.Support incident response investigations involving cloud misconfigurations, data exposure, and/or AI-related security events.Perform security architecture reviews and provide guidance to engineering teams to reduce risk while enabling business objectives.Implement and improve security controls that strengthen ICW’s overall security posture while supporting modern cloud and data initiatives. Security Architecture, Standards, and Risk Partners with Engineering, Infrastructure, Cloud, Data, and Operations teams to embed security into system design and delivery.Lead security reviews for new data, analytics, and/or AI initiatives, including architecture reviews and risk assessments prior to production deployment.Conduct threat modeling and security design reviews for systems involving data, analytics, AI, and/or cloud services.Create and maintain technical security standards and guardrails related to data protection, cloud usage, and/or AI security.Partner with internal teams to remediate security findings and track remediation activities through closure.Provide security guidance that balances risk reduction with delivery speed and business priorities. Collaboration and Enablement Executes technical and process changes required to adopt, maintain, and adjust InfoSec controls as required to manage the company's risks and align with industry best practices.Partner with Engineering, Cloud, Data, Infrastructure, and Operations teams to embed security into system design and delivery.Act as a trusted security advisor to project teams, helping them understand risk, controls, and secure design patterns.Coach and mentor engineers on secure development, data handling, and cloud security best practices.Work closely with project management and internal stakeholders to define and implement secure, scalable solutions. Data and AI Security Design and implement security controls to protect sensitive insurance data across AWS data platforms, analytics pipelines, and AI/ML workloads.Provide security oversight for AI and LLM use cases, including model access controls, training data protection, inference security, data leakage prevention, and misuse/abuse risk.Assess and mitigate risks related to AI systems, LLM usage, prompt injection, data poisoning, third-party data sources, and emerging AI threats.Partner with Compliance and Governance teams to ensure data and AI controls align with NIST, NYDFS, PCI DSS, and California privacy regulations (CPRA/CCPA).Contribute to the development of ICW’s AI security standards, guardrails, and internal guidance as AI adoption expands across the enterprise.Support Third-Party Risk (TPR) evaluations for AI vendors, SaaS platforms, data providers, and analytics tools that process or access ICW data.Evaluate and onboard security tools and vendors related to data protection, cloud security posture, AI governance, and detection. We'll turn each sentence into
- . Might be many but okay.
- Requirements / Qualifications: Education And Experience section. Also Certificates etc. We'll combine into Requirements maybe. Could have
Requirements
with- for each bullet: Bachelor's Degree required..., Minimum 8 years..., Minimum 3-5 years AWS..., Direct experience..., Experience in cyber security role..., Experience with AWS Services..., Certification in GSEC, CISSP, and/or Security+ preferred..., AWS Certified Security – Specialty, preferred.
- Knowledge And Skills: Could be Skills section. We'll put
Skills
with- each bullet.
- Physical Requirements and WORK ENVIRONMENT: Could be a section maybe "Working Conditions" but not in allowed headings list. Allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have Qualifications separate from Requirements? Could combine. But we have both Education/Experience and Certifications maybe under Requirements. Skills separate. Benefits: we have "WHY JOIN ICW GROUP?" includes benefits: competitive benefits package, generous medical, dental, vision, 401K, company match, bonus potential, PTO, paid holidays, support learning. Also "We are currently not offering employment sponsorship". That's not a benefit but note. We'll include Benefits section with those items.
Pay: The posting includes salary range: "The current range for this position is $121,624.81 - $217,710.99". Also note exclusive of fringe benefits and potential bonuses. We'll include Pay section with that info.
Schedule: Not mentioned besides full-time. Could infer full-time but not explicit schedule details. The posting says Job Type: Full time. That's schedule info. We can include Schedule section with "Full-time". It's specific content.
We must not create sections with filler like "not specified". So we include Schedule only if we have explicit content: Yes we have "Job Type: Full time". So we can include.
We must not repeat job title. Not include Job ID/Req ID.
We must remove boilerplate like EEO etc. We'll omit.
Now produce HTML fragment.
Structure:
About the role
... purpose paragraph ...
Responsibilities
- ... ...
Requirements
- ... ...
Skills
- ... ...
Benefits
- ... ...
Pay
The current range for this position is $121,624.81 - $217,710.99 (exclusive of fringe benefits and potential bonuses).
Schedule
Full-time
Check that we didn't miss any substantive info: The purpose paragraph includes multiple sentences; we need to preserve all. Let's copy exactly: "PURPOSE OF THE JOB The purpose of the Information Security Engineer III is to design secure architectures and develop cybersecurity approaches and techniques to protect ICW Group’s cloud, data, and/or AI-driven environments. This position will assist with strategic initiatives for short and long-term plans to identify and reduce the attack surface across applications and systems. This role partners closely with application, cloud, data, and analytics teams to ensure security is embedded into systems from design through production This role supports ICW’s modern data initiatives by reducing risk, strengthening security controls, and enabling secure adoption of new technologies in a highly regulated insurance environment. The engineer contributes across vulnerability management, threat detection, and incident response while providing practical security guidance that balances risk, compliance, and business needs." We need to ensure spaces correct. We'll put aswith that text. Now responsibilities list: We'll break each sentence. Let's extract sentences with proper punctuation. From Monitoring, Detection, and Incident Support: - Monitors cloud, on-prem, and SaaS environments for security threats using SIEM, EDR, cloud-native logging, and network telemetry. - Assists with security incident response activities, including investigation, containment, remediation, and post-incident analysis. - Researches and implements methods to remediate network and application security vulnerabilities. - Leads and participates in security architecture controls reporting, compliance audits, monthly and ad-hoc statistics and trends, and risk-focused reports including internal and 3rd party Risk Assessments. - Produce risk-focused security findings and communicate clearly with technical and non-technical stakeholders. (Note: "Produce" should be "Produces" but keep as given.) - Conducts threat hunting and root-cause analysis to identify anomalous behavior, exploitation attempts, and indicators of compromise. - Investigates potential data misuse, data exfiltration, and anomalous access patterns using logs, DLP, and monitoring tools. Cloud & Generalist Security Responsibilities: - Prepares and analyses system security reports by collecting, analyzing, and summarizing data and trends and makes recommendations to improve security. - Serve as a senior technical contributor across cloud security, including IAM, logging, monitoring, detection, and secure deployment patterns. - Lead or contribute to vulnerability management across cloud infrastructure, applications, containers, and data platforms. - Participate in offensive and defensive security activities, including threat modeling, red team exercises, blue team detection improvements, and threat hunting. - Support incident response investigations involving cloud misconfigurations, data exposure, and/or AI-related security events. - Perform security architecture reviews and provide guidance to engineering teams to reduce risk while enabling business objectives. - Implement and improve security controls that strengthen ICW’s overall security posture while supporting modern cloud and data initiatives. Security Architecture, Standards, and Risk: - Partners with Engineering, Infrastructure, Cloud, Data, and Operations teams to embed security into system design and delivery. - Lead security reviews for new data, analytics, and/or AI initiatives, including architecture reviews and risk assessments prior to production deployment. - Conduct threat modeling and security design reviews for systems involving data, analytics, AI, and/or cloud services. - Create and maintain technical security standards and guardrails related to data protection, cloud usage, and/or AI security. - Partner with internal teams to remediate security findings and track remediation activities through closure. - Provide security guidance that balances risk reduction with delivery speed and business priorities. Collaboration and Enablement: - Executes technical and process changes required to adopt, maintain, and adjust InfoSec controls as required to manage the company's risks and align with industry best practices. - Partner with Engineering, Cloud, Data, Infrastructure, and Operations teams to embed security into system design and delivery. - Act as a trusted security advisor to project teams, helping them understand risk, controls, and secure design patterns. - Coach and mentor engineers on secure development, data handling, and cloud security best practices. - Work closely with project management and internal stakeholders to define and implement secure, scalable solutions. Data and AI Security: - Design and implement security controls to protect sensitive insurance data across AWS data platforms, analytics pipelines, and AI/ML workloads. - Provide security oversight for AI and LLM
- each bullet.
- Physical Requirements and WORK ENVIRONMENT: Could be a section maybe "Working Conditions" but not in allowed headings list. Allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have Qualifications separate from Requirements? Could combine. But we have both Education/Experience and Certifications maybe under Requirements. Skills separate. Benefits: we have "WHY JOIN ICW GROUP?" includes benefits: competitive benefits package, generous medical, dental, vision, 401K, company match, bonus potential, PTO, paid holidays, support learning. Also "We are currently not offering employment sponsorship". That's not a benefit but note. We'll include Benefits section with those items.
Pay: The posting includes salary range: "The current range for this position is $121,624.81 - $217,710.99". Also note exclusive of fringe benefits and potential bonuses. We'll include Pay section with that info.
Schedule: Not mentioned besides full-time. Could infer full-time but not explicit schedule details. The posting says Job Type: Full time. That's schedule info. We can include Schedule section with "Full-time". It's specific content.
We must not create sections with filler like "not specified". So we include Schedule only if we have explicit content: Yes we have "Job Type: Full time". So we can include.
We must not repeat job title. Not include Job ID/Req ID.
We must remove boilerplate like EEO etc. We'll omit.
Now produce HTML fragment.
Structure:
- for each bullet: Bachelor's Degree required..., Minimum 8 years..., Minimum 3-5 years AWS..., Direct experience..., Experience in cyber security role..., Experience with AWS Services..., Certification in GSEC, CISSP, and/or Security+ preferred..., AWS Certified Security – Specialty, preferred.
- Knowledge And Skills: Could be Skills section. We'll put