Job Name: Infrastructure Security Engineer
Location- Remote
Job Type- Full Time
Position Overview
We are seeking an experienced Infrastructure Security Engineer to join our cybersecurity team and play a critical role in protecting our organization's digital infrastructure. This position requires a versatile security professional who can operate across multiple domains including cloud security, vulnerability management/patch management, endpoint protection, and security operations.
Key Responsibilities
AWS Cloud Security
- Design, implement, and maintain security controls across AWS environments including IAM policies, security groups, NACLs, and VPC configurations
- Configure and manage AWS security services such as CloudTrail, GuardDuty, Security Hub, Config, and Inspector
- Implement Infrastructure as Code (IaC) security best practices using CloudFormation, Terraform, or CDK
- Conduct regular security assessments of cloud architectures and recommend improvements
- Manage AWS compliance frameworks and ensure adherence to industry standards (SOC 2, ISO 27001, etc.)
Vulnerability Management
- Lead enterprise-wide vulnerability assessment programs using tools such as Nessus
- Develop and maintain vulnerability and patch management policies, procedures, and SLAs, regular reporting
- Coordinate with IT and development teams to prioritize and remediate security vulnerabilities
- Generate executive-level reports on vulnerability metrics and risk exposure
- Conduct regular penetration testing and security assessments of applications and infrastructure
Patch Management
- Design and implement automated patch management strategies across Windows, Linux, and cloud environments
- Coordinate with system administrators to schedule and deploy critical security patches
- Maintain patch testing procedures to minimize business disruption
- Monitor patch compliance across the enterprise and report on patch deployment status
- Develop rollback procedures and incident response plans for patch-related issues
Endpoint Security
- Deploy and manage endpoint detection and response (EDR) solutions such as CrowdStrike
- Configure and tune endpoint security policies including antivirus, application control, and device encryption
- Investigate and respond to endpoint security incidents and malware infections
- Implement mobile device management (MDM) and bring-your-own-device (BYOD) security policies
- Conduct forensic analysis of compromised endpoints when required
Required Qualifications
Education & Experience
- Bachelor's degree in computer science, Information Security, or related field
- Minimum 5+ years of hands-on experience in information security roles
- 3+ years of experience with AWS cloud security architecture and services
Technical Skills
- Cloud Security: Deep expertise in AWS security services, IAM, VPC security, and cloud compliance frameworks
- Vulnerability Management: Proficiency with vulnerability scanners (Qualys, Nessus, Rapid7) and risk assessment methodologies
- Patch Management: Experience with automated patching tools (WSUS, Red Hat Satellite, AWS Systems Manager)
- Endpoint Security: Hands-on experience with EDR/XDR platforms and endpoint management tools
- SIEM/SOAR: Advanced skills in log analysis, correlation rule development, and security orchestration
- Operating Systems: Strong knowledge of Windows and Linux security hardening and administration
- Security Certifications (Preferred)
- AWS Certified Security - Specialty
- CISSP (Certified Information Systems Security Professional)
- GCIH (GIAC Certified Incident Handler)
- CEH (Certified Ethical Hacker)
Key Competencies
- Strong analytical and problem-solving skills with attention to detail
- Excellent communication skills and ability to explain complex security concepts to technical and non-technical stakeholders
- Project management capabilities with experience leading cross-functional security initiatives
- Ability to work in fast-paced environments and manage multiple priorities
- Strong understanding of regulatory compliance requirements (PCI-DSS, HIPAA, SOX, GDPR)
- Experience with risk assessment frameworks and security governance
- Reporting Structure
This position reports to the Engineering Manager Cyber Security and collaborates closely with IT Operations, Development Teams.
