GeneDx · 1 week ago

Information Security Engineer

Gaithersburg, MD

Full-time

Hybrid

Senior Level

$130K/yr - $155K/yr

5+ years exp

Wonder how qualified you are to the job?

AnalyticsArtificial Intelligence (AI)

Insider Connection @GeneDx

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Responsible for the design, configuration, implementation, monitoring, analysis, maintenance, and technical support of security engineering service platforms.

Provides security input into engineering, IT infrastructure, and application design reviews.

Address threats and potential attack vectors such as XSS, SQL injection, hijacking, and social engineering.

Create standard operating procedures and policy documents.

Conduct internal security audits across different business units.

Configure, enhance, and review logs and events utilizing SIEM and other legacy log locations.

Configure, review, and optimize the vulnerability management function and the security awareness and training program.

This is a hybrid position at our Gaithersburg, MD office.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

SIEM SolutionsSplunkAzure SentinelRisk Management FrameworksNISTPublic Cloud SecurityAWSAzureGCPOCIHIPAASOC2SOXSecurity AssessmentAuditsSecurity ToolsNext-Generation FirewallsWeb Application FirewallsEndpoint SecurityEncryptionEmail Filtering SolutionsData Loss PreventionWindows ServersDNSDHCPActive DirectoryNetwork Switching

Required

Experience in configuring and administering SIEM solutions such as Splunk, Azure sentinel, etc.

Demonstrated experience in implementing Risk Management Frameworks such as NIST (RMF) or equivalent.

5-7 years of experience working with public cloud security such as AWS, Azure, GCP, and OCI.

Experience in conducting HIPAA, SOC2, and SOX security assessment/Audits.

Advance experience with standard security tools and platforms, including next-generation firewalls, web application firewalls (WAF), endpoint security and encryption, email filtering solutions, and data loss prevention.

Strong engineering skills in Windows Servers, DNS, DHCP, Active Directory and Network switching.