Information Security Engineer 4

Information Security Engineer 4 Financial Services Industry ClientOur Financial Services Industry Client is seeking a senior-level Information Security Engineer to support enterprise security initiatives across endpoint security, email security, cloud security, network security, automation, and threat management. This role will work on complex security engineering challenges, partnering with Security Operations, Infrastructure, Architecture, Risk, Compliance, and Technology teams to strengthen and modernize the organization's cybersecurity posture.This position is best suited for a hands-on engineer who enjoys designing solutions, automating processes, improving security controls, and solving complex problems within a large enterprise environment.Key ResponsibilitiesEngineer, implement, and support enterprise security technologies across endpoint, cloud, email, and network security domains.Design and enhance security controls to improve organizational security posture.Support incident response efforts, including investigation, analysis, containment, and remediation of security events.Analyze phishing, malware, endpoint, and network-based threats.Perform threat detection, threat hunting, root cause analysis, and security investigations.Develop automation solutions and integrations to improve operational efficiency and security effectiveness.Build and maintain Infrastructure-as-Code and automation frameworks where applicable.Collaborate with security operations, engineering, cloud, infrastructure, and governance teams.Conduct vulnerability assessments, security reviews, and remediation planning.Translate security requirements, policies, and standards into practical engineering solutions.Create and maintain technical documentation, security standards, and operational procedures.Participate in on-call support rotations as required.Required Qualifications5+ years of Information Security Engineering experience.Experience supporting security initiatives within large enterprise environments.Strong understanding of security engineering principles and best practices.Experience with incident response, threat analysis, and security operations.Strong troubleshooting and problem-solving skills.Excellent written and verbal communication skills.Ability to work independently and collaboratively across multiple teams.Preferred Technical ExperienceEndpoint Security: CrowdStrike, Microsoft Defender, Symantec Endpoint Protection, BitLocker, Endpoint Detection & Response (EDR) platformsEmail Security: Proofpoint, FireEye / Mandiant, Secure Email Gateway technologies, Phishing and malware analysisCloud Security: Microsoft Azure, Google Cloud Platform (GCP), Cloud Security Posture Management (CSPM), Cloud Governance and Security ControlsNetwork Security: Palo Alto Firewalls, Fortinet Firewalls, Network Access Control (NAC), Zero Trust Network Access (ZTNA), Proxy Security TechnologiesSecurity Monitoring & Threat Detection: Splunk, SIEM Platforms, Threat Hunting, Security AnalyticsAutomation & Development: Python, PowerShell, REST APIs, GitHub, GitHub Actions, CI/CD Pipelines, Ansible, Terraform, Infrastructure as Code (IaC)Security Frameworks & Governance Experience: Experience with one or more of the following is highly desired: NIST Cybersecurity Framework, CIS Controls & Benchmarks, ISO 27001, Cloud Security Alliance (CSA), Security Baselines & Hardening Standards, Risk & Control Frameworks, Audit & Compliance ProgramsPreferred QualificationsFinancial Services or other highly regulated industry experience.Security Engineering or Cyber Fusion Center experience.Experience implementing Zero Trust strategies.Experience with policy-as-code or security automation frameworks.Familiarity with cloud governance, security baselines, and compliance requirements.Experience designing scalable security solutions within enterprise environments. Apex Systems