Information Security Engineer

Job Title: Information Security EngineerLocation: Hybrid role based in Andover, MA with flexibility for remote work. Fast-paced, collaborative culture with opportunity for professional growth. Occasional after-hours availability required for critical incidents or on-call coverage.Pay: $150,000 - $180,000About ALKUYour next big career move starts here, join us at an organization that has been voted Best Place to Work for the past decade.Join one of the fastest-growing, top-rated staffing firms in the country. ALKU is a specialized consulting and staffing firm that connects exceptional talent with organizations across Technology, Life Sciences, Healthcare IT, Government, and other highly specialized industries. Since our founding, we've built our business around expertise, long-term relationships, and delivering an exceptional experience for both our clients and consultants.See it for yourself @LifeatALKU or on our website page: About ALKU!What You'll DoYou will own ALKU’s day-to-day cybersecurity operations and long-term security strategy, serving as the primary internal liaison to our Managed Security Service Provider (MSSP) and our Managed Service Provider (MSP). You bring deep security engineering experience, a strong networking foundation, and the ability to communicate risk clearly to leadership.Security Strategy & Governance Drive and maintain ALKU’s cybersecurity roadmap and controls, aligning initiatives with business risk and prioritiesEstablish and communicate security policies, standards, and procedures across the organizationReport on security posture and program maturity to senior leadershipHelp drive risk assessments, remediation planning, and evaluate security investments and vendorsServe as ALKU’s primary point of contact with MSSP and MSP managing alert tuning, detection coverage, response playbooks, and regular business reviewsEnsure SLAs and security commitments from both partners are metIncident Monitoring, Triage & Response Oversee detection, triage, escalation, and response to security incidentsPartner with MSP to maintain ALKU’s incident response plan, tabletop exercise program, and post-incident review processProvide on-call escalation support during high-severity incidents; occasional after-hours availability requiredAnalyze security data, alerts, and logs to identify risks and trends; maintain up-to-date awareness of the evolving threat landscapeWork with MSP and MSSP to tune Automatic Response Plays, SIEM and EDR tooling to reduce noise and improve detectionNetwork, Endpoint & Infrastructure Security General understanding of networking expertise to assess and improve ALKU’s security architecture (firewalls, VPN, network segmentation, DNS security, and Zero Trust initiatives)Review and advise on network changes, cloud connectivity, remote access design, and firewall rule sets in partnership with the MSPWork with MSP to oversee Microsoft 365 and Entra ID (Azure AD) security configuration, Conditional Access, and MFA enforcementAssess and advise on cloud security posture across Azure, SaaS platforms, and custom applications at ALKUCompliance, Awareness & Reporting Lead the security awareness training program including phishing simulations and role-based educationMaintain accurate security incident records, documentation, and audit-ready evidence librariesPrepare regular security reports for internal stakeholdersWhat We're Looking For Required7+ years of progressive information security experience, with 2–3+ years in a senior or lead roleNetworking knowledge: IP, routing/switching, firewall architecture, VPN, VLANs, DNS, IDS/IPS - a background in network engineering or network security is a strong differentiatorHands-on experience with SIEM platforms, EDR tools, and threat detection/response workflows; familiarity with MDR/MSSP platforms preferredExperience managing or overseeing MSSPs and/or MSPs in an enterprise or mid-market environmentStrong command of the Microsoft 365 security stack: Defender suite, Entra ID, Conditional AccessAbility to develop security strategy and communicate risk clearly to non-technical leadershipEducation Bachelor’s degree in Computer Science, Information Security, Information Technology, or related field preferred; equivalent experience consideredPreferredCISSP, CISM, CCNP Security, CompTIA CASP+, or equivalent certificationExperience with SASE, SD-WAN, or Zero Trust network architectureFamiliarity with Microsoft Sentinel, Defender compliance toolingCloud security experience (Azure, AWS a plus)Familiarity with CMMC 2.0 or NIST ControlsWhat We ProvideComprehensive onboarding and training from day oneDedicated mentorship and coachingClear career progression and opportunities for internal advancementThe BenefitsMedical, dental, and visionLife and disability insuranceCompetitive 401(k) matchEquity planPTO package, plus birthdays off and volunteer time offPaid holidaysStudent Loan Reimbursement after one year as a full-time employeeChildcare reimbursementFitness reimbursementA variety of Employee Resource Groups (ERGs)Physical requirementsProlonged periods of sitting at a desk and working on a computerWhat Happens Next Apply, and you'll hear from an Internal Recruiter within 1–4 business days if you're a matchEqual Opportunity Employer ALKU is an Equal Opportunity Employer committed to fostering an inclusive workplace where all individuals are treated with respect and provided equal employment opportunities. Employment decisions are based on business needs, job-related qualifications, merit, and performance, without regard to any characteristic protected by applicable federal, state, or local law.ALKU is committed to providing reasonable accommodations to qualified individuals with disabilities and applicants throughout the hiring process, consistent with applicable law.**Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.**