[Remote] Lead Information Security Engineer

Note: The job is a remote job and is open to candidates in USA. ICW Group, an insurance carrier, is hiring a Lead Information Security Engineer to design secure architectures and cybersecurity approaches for its systems and infrastructure. The role leads security monitoring, incident response, risk assessments, security architecture initiatives, and cross-functional efforts to reduce technology risk.

Responsibilities

• Monitors networks and systems for security breaches, using software that detects intrusions and anomalous system behavior and develops strategies to respond to and recover from a security breach
• Identifies gaps in the technical tool/technology suite and makes recommendations
• Leads security incident response, including preparation, detection, analysis, containment, eradication, and recovery
• Researches and implements methods to remediate network and application security vulnerabilities
• Leads and participates in security architecture controls reporting, compliance audits, monthly and ad-hoc statistics and trends, and risk-focused reports including internal and 3rd party Risk Assessments
• Utilizes automated tools to identify, assess, and report security concerns, with emphasis placed on effective communication to stakeholders. Takes an active lead to inform, advise, and partner with business units to help better secure operations
• Overseas complex security projects and issues
• Develops a set of security standards to respond to and recover from a security breach
• Provides support by proposing solutions, coordinating implementation, and enforcing information systems security policies, standards, and methodologies
• Uses advanced technologies including Intrusion Detection & Prevention Systems (IDS/IPS), Firewalls, SIEM, Antivirus, Network Packet Analyzers, Malware analysis and forensics tools to detect intrusions, breaches in compliance, etc
• Prepares and analyses system security reports by collecting, analyzing, and summarizing data and trends and makes recommendations to improve security
• Maintains operational security posture for an information system or program to ensure information system security policies, standards, and procedures are established and followed
• Creates and updates technical security standards for assets and software
• Provides information security expertise to system development teams throughout the life cycle process
• Partners with systems engineering teams to ensure system design and implementation are consistent with company policies, requirements, and directives
• Conducts risk assessments, penetration tests and diagnoses internet/extranet security, intrusion attempts, and cyber-crime response
• Leads and conducts information security risk assessments including documenting processes, service level agreements and best practices
• Develops the overall security design, development, testing and implementation of security solutions. Recommends compliance strategies that support customer requirements and alignment to company policy
• Ensures security quality, adherence to security guidelines, profitability, and information security related metrics for self and assigned projects
• Collaborates with key stakeholders on remediation strategies and follows remediation activities through closure
• Prepares and presents comprehensive reports and recommendations to senior management and stakeholders on security-related matters
• Develops and implements comprehensive security architectures encompassing all areas of IT and business technology for ICW Group using standard and advanced security measures
• Works with peers, cross functional architecture leadership, and other internal groups to drive technical security risk down in targeted areas while ensuring adherence to ICW architecture standards
• Coaches and educates others to increase early detection rates and decrease IT risk and security
• Documents as is state of information security. Keeps current on industry trends, principles, and thought to define long range technology transitions
• Performs end to end full stack reviews of current or incoming technologies for ITSEC compliance
• Ensures that proposed and existing technology architectures are aligned with organizational security goals and objectives

Skills

• Bachelor's Degree from four-year college or university required with major or emphasis Engineering, Cybersecurity, Networking, or Computer Science related discipline
• Minimum 10 years of experience working in a security engineering related role designing secure networks, systems and application architectures or equivalent combination of education and experience required
• Direct experience using advanced technologies such as Intrusion Detection & Prevention Systems (IDS/IPS), Firewalls, SIEM, Antivirus software, Network Packet Analyzers, content filtering, Malware analysis and forensics tools to detect intrusions
• Experience in cyber security role requiring knowledge of data analysis, risk assessment, risk mitigation, investigation methods, incident management concepts and practices, and policy and procedure development
• Experience with AWS Services such as AWS Identity & Access Management, AWS Organizations, AWS Security HuB, Guard Duty, CloudTrail, AWS CloudTrail
• Strong knowledge of risk assessment tools, technologies, and methodologies
• Knowledge of disaster recovery, computer forensic tools, technologies, and methods
• Knowledge of enterprise security platforms
• Ability to communicate network security issues to peers and management
• Ability to read and use the results of mobile code, malicious code, and anti-virus software
• Strong understanding of endpoint security solutions to include File Integrity Monitoring and Data Loss Prevention
• Demonstrated experience as a lead engineer in the design, implementation and support in an enterprise IT environment
• Ability to apply principles of logical or scientific thinking to a wide range of intellectual and practical problems
• Ability to hypothesize on root cause of inefficiencies and then test out probable solutions against those hypotheses
• Must be able to read, write and speak English effectively
• Ability to effectively communicate/present technical information to a non-technical audience
• Ability to cross train and share information with team members
• Minimum 3-5 years of experience in AWS Cloud Security services preferred
• Experience with LLM-based applications, document intelligence, automated data extraction, or AI systems processing structured or unstructured enterprise data preferred
• Understanding of LLM applications, AI-enabled workflows, data pipelines, data handling, and human-review practices preferred
• Experience with AI/ML platforms, generative AI, LLM applications, data pipelines, AI-enabled automation, or analytics environments preferred
• Certification in GSEC, CISSP, and/or Security+ preferred
• AWS Certified Security – Specialty, preferred

Benefits

• Challenging work and the ability to make a difference
• You will have a voice and feel a sense of belonging
• Generous medical, dental, and vision plans
• 401K retirement plans and company match
• Bonus potential for all positions
• Paid Time Off
• Paid holidays throughout the calendar year
• We’ll support you 100% to continue learning

Company Overview