Senior Information Security Engineer

We are seeking a Senior Information Security Engineer to join our team at Independent Living Systems (ILS). ILS, along with its affiliated health plans known as Florida Community Care and Florida Complete Care, is committed to promoting a higher quality of life and maximizing independence for all vulnerable populations.

About the Role:

The Senior Information Security Engineer serves as a senior technical resource within the Information Security team and is responsible for designing, implementing, and maintaining advanced security solutions that protect the organization's systems, applications, networks, and data. This position provides technical leadership for information security initiatives involving security architecture, identity and access management, cloud security, vulnerability management, incident response, threat detection, and security monitoring. The Senior Information Security Engineer works closely with Information Technology teams and business stakeholders to identify and mitigate security risks, improve security capabilities, ensure regulatory compliance, and strengthen the organization's overall information security posture.

Minimum Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• At least 8 years of experience in information security, cybersecurity, security engineering, security operations, or a related technical security role.
• Hands-on experience with security architecture, incident response, vulnerability management, identity and access management, and security monitoring.
• Experience leading information security projects and technical security initiatives.
• Strong understanding of enterprise security controls, risk management principles, and regulatory compliance requirements.
• Relevant experience may substitute for the educational requirement on a year-for-year basis.

Preferred Qualifications:

• Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience with cloud security platforms and Microsoft 365 security technologies.
• Experience with enterprise security solutions such as CrowdStrike, Tanium, Okta, Microsoft Entra ID, Cisco Umbrella, Mimecast, SIEM, and Privileged Access Management (PAM) solutions Experience supporting healthcare industry regulations including HIPAA and security compliance requirements.
• Experience implementing Zero Trust, Identity Security, and Security Automation initiatives.
• Certifications such as CISSP, CISM, CCSP, GCIH, CEH, or equivalent industry-recognized certifications.

Responsibilities:

• Demonstrate commitment to Our Mission and model ILS Experience Standards of Excellence.
• Design, implement, and maintain enterprise security solutions and security architectures that align with organizational goals and industry best practices.
• Lead security engineering initiatives involving endpoint security, identity and access management, cloud security, email security, vulnerability management, and security monitoring technologies.
• Evaluate emerging security technologies and recommend solutions to improve the organization's security posture.
• Lead vulnerability management activities including vulnerability assessments, risk prioritization, remediation tracking, and reporting.
• Support identity and access management initiatives including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Privileged Access Management (PAM), and identity governance activities.
• Monitor, investigate, and respond to security incidents including malware infections, phishing attacks, unauthorized access attempts, insider threats, and other security events.
• Perform advanced threat analysis, root cause investigations, and forensic analysis to support incident response and remediation efforts.
• Develop, maintain, and improve incident response procedures, security playbooks, and operational processes.
• Support security monitoring technologies including EDR/XDR, SIEM, email security, vulnerability management, cloud security, and identity protection platforms.
• Collaborate with Information Technology teams to implement security controls and remediate identified risks and vulnerabilities.
• Develop security metrics, dashboards, and reports to measure and communicate information security program effectiveness.
• Mentor and provide technical guidance to Information Security Analysts, Information Security Engineers, and other technology personnel.
• Stay current on emerging threats, attack techniques, vulnerabilities, regulatory requirements, and information security industry trends.
• Participate in after-hours incident response activities as required.
• Perform other duties as assigned.