eResources · 12 hours ago
Security Engineer
eResources LLC is a company focused on security solutions, and they are seeking a Security Engineer to design, implement, and maintain security controls for their systems and networks. The role involves collaborating with various teams to ensure security is integrated into processes while managing incidents and vulnerabilities effectively.
ContentOutsourcingWeb Development
Responsibilities
Collaborate with Engineering team, Sysadmins and Management on implementation of advised changes, with a focus on user adoption and minimal disruption to business operations
Maintain and improve organizational change management processes
Work within Engineering team to develop and improve secure by design principles
Design, implement, and maintain security controls across infrastructure, cloud environments, endpoints, and applications
Monitor and manage security tools including SIEM, EDR, vulnerability management, and access controls
Ensure systems meet availability, integrity, and confidentiality requirements
Perform regular security reviews, audits, and risk assessments to identify and mitigate threats
Monitor for security events and indicators of compromise across systems and networks
Act as a consulting and escalation resource for Incident Commanders and support consistent incident response
Lead root cause analysis and develop corrective and preventative actions following incidents
Assist with documenting incidents, response actions, and lessons learned to improve future readiness
Conduct vulnerability scans and coordinate remediation efforts with internal teams
Prioritize vulnerabilities based on risk, exposure, and business impact
Validate remediation efforts and track progress to resolution
Stay informed on emerging threats, exploits, and security trends relevant to the organization’s environment
Work with CISO & Engineering to design secure, scalable, and compliant solutions
Provide guidance and training as needed on security configurations, identity and access management, and data protection
Review system designs and changes to ensure alignment with security best practices
Advocate for security-by-design principles across all projects and initiatives
Serve as an escalation point for complex or high-risk security issues
Support internal teams and clients during security-related investigations or events
Develop and maintain security documentation, standards, and runbooks
Mentor team members by sharing security knowledge, tools, and best practices
Support compliance initiatives (e.g., SOC, ISO, HIPAA, PCI) through evidence collection and control validation
Assist with third-party risk assessments and security questionnaires
Track and report security risks, exceptions, and remediation plans
Contribute to the continuous improvement of security policies and procedures
Use task and project management tools to track security work and priorities
Contribute to project planning, execution, and documentation from a security perspective
Communicate clearly with stakeholders regarding risks, timelines, and recommendations
Track and report security-related KPIs and metrics (e.g., incident trends, vulnerability remediation timelines)
Provide regular updates to leadership on security posture, risks, and improvement initiatives
Identify opportunities to enhance security effectiveness, efficiency, and visibility
Qualification
Required
Proven experience in information security, security engineering, or related technical field
Strong understanding of network, system, cloud, and application security principles
Hands-on experience with security tooling such as SIEM, EDR, IAM, and vulnerability scanners
Ability to analyze complex security issues and deliver clear, actionable recommendations
Strong documentation and communication skills, with the ability to translate technical risk into business impact
Relevant certifications (e.g., CISSP, CISM, CEH, Security+, AWS/Azure Security)
Experience securing cloud environments and modern SaaS platforms
Familiarity with compliance frameworks and audit processes
Experience with automation or scripting to improve security operations efficiency
Reliable transportation, valid driver's license, and proof of insurance meeting state requirements
Willingness to travel occasionally for client onsite support or project implementation
progressive IT: 10 years (Required)
complex network: 5 years (Required)
working in a MSP environment: 5 years (Required)
Benefits
401(k)
401(k) matching
Dental insurance
Employee assistance program
Flexible spending account
Health insurance
Life insurance
Paid time off
Professional development assistance
Vision insurance