Information Security Engineer

We are seeking a skilled Information Security Engineer with 4+ years of hands-on experience to join our growing team. This role is ideal for professionals who are passionate about cybersecurity, risk mitigation, and developing secure systems. As part of our security team, you'll be instrumental in protecting our infrastructure, applications, and data from threats and vulnerabilities.
This position plays a critical role in the day to day operations of the firm's information security program. The ideal candidate will possess strong technical expertise, attention to detail, and the ability to clearly communicate security concepts. The Information Security Engineer must be capable of acting swiftly and decisively during incidents and will contribute to the firm's proactive defense strategies and compliance initiatives.

This is a hybrid role based out of Essex County, NJ

Key Responsibilities:

• Design, implement, and manage security tools and technologies (e.g., firewalls, IDS/IPS, SIEM, DLP, endpoint protection).
• Perform security assessments, penetration testing, and vulnerability scanning across systems and networks.
• Develop and enforce security policies, standards, and best practices.
• Monitor network traffic and investigate security breaches or incidents.
• Collaborate with IT, DevOps, and software engineering teams to ensure secure system design and implementation.
• Conduct threat modeling, risk assessments, and impact analysis.
• Stay current with industry trends, threat intelligence, and compliance requirements (e.g., NIST, ISO 27001, HIPAA, PCI-DSS).
• Assist with incident response planning and post-incident analysis.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum 4 years of experience in information security or a related role.
• CISSP or similar certification is required, additional certifications (e.g., CISM, CEH, GIAC) are a plus.
• Experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm) and endpoint security tools.
• Strong knowledge of security frameworks, standards, and compliance regulations.
• Familiarity with information security frameworks such as NIST CSF or ISO 27001.
• Knowledge of relevant regulatory and compliance standards (e.g., HIPAA, GDPR, SOX).
• Excellent analytical, problem-solving, and communication skills.