Sr.Security Engineer

Sr.Security Engineer

Contract/Contract to Hire

Atlanta, GA

Qualifications:

·       6+ years of experience in Information Security, Cybersecurity, or a related IT security role.

·       Strong experience implementing and supporting enterprise security technologies, including firewalls, IDS/IPS, endpoint protection, and encryption solutions.

·       Hands-on experience with vulnerability management, risk assessments, security testing, and incident response.

·       Experience conducting forensic investigations and responding to cybersecurity incidents.

·       Knowledge of identity and access management (IAM), authentication, authorization, and privileged access controls.

·       Experience developing security policies, standards, and governance frameworks.

·       Familiarity with disaster recovery, business continuity planning, and backup strategies.

·       Experience with security monitoring, SIEM platforms, and security automation tools is preferred.

·       Strong understanding of networking concepts, operating systems, cloud security, and cybersecurity best practices.

·       Knowledge of security frameworks and regulatory standards such as NIST, ISO 27001, CIS Controls, HIPAA, PCI-DSS, or similar.

·       Excellent analytical, troubleshooting, problem-solving, and communication skills.

·       Ability to work collaboratively with cross-functional teams in a fast-paced environment.

·       Relevant security certifications such as CISSP, CISM, CEH, Security+, GIAC, or equivalent are preferred.

Responsibilities:

·       Design, implement, manage, and support enterprise security systems and technologies to protect the organization''s information assets.

·       Analyze the information security environment and develop security measures to prevent unauthorized access, modification, disclosure, or destruction of data.

·       Configure, deploy, and maintain firewalls, intrusion detection/prevention systems (IDS/IPS), encryption solutions, and other security technologies.

·       Investigate security incidents, conduct forensic analysis, and coordinate incident response and recovery activities.

·       Develop and maintain automation scripts and tools to improve security operations, incident tracking, and response efficiency.

·       Perform vulnerability assessments, penetration testing, security risk analyses, and compliance assessments.

·       Design, implement, and monitor security controls for systems, applications, networks, and data.

·       Collaborate with cross-functional teams to implement authentication, authorization, encryption, and identity management solutions.

·       Evaluate and recommend security technologies, tools, and best practices to strengthen the organization''s security posture.

·       Develop, implement, and maintain corporate information security policies, standards, and procedures.

·       Establish and maintain access control frameworks, investigate unauthorized access, and recommend corrective actions.

·       Develop disaster recovery and business continuity plans to ensure the protection and recovery of critical systems and data.

·       Perform regular system backups and support disaster preparedness initiatives.

·       Monitor security events, identify vulnerabilities, and implement remediation strategies.

·       Assess data sensitivity and recommend appropriate security controls based on business and regulatory requirements.

·       Partner with infrastructure, networking, and application teams to ensure secure system design and deployment.

·       Prepare technical reports, risk assessments, and documentation related to security findings and recommendations.

·       Conduct security awareness training and educate employees on cybersecurity policies and best practices.

·       Stay current with emerging cybersecurity threats, technologies, regulatory requirements, and industry standards.

·       Support security audits, compliance initiatives, and continuous improvement of the organization''s information security program.