Note: The job is a remote job and is open to candidates in USA. Mariner is seeking a hands-on Information Security Engineer to join its Security Engineering & Architecture team. The role focuses on implementing and operating security controls across network, infrastructure, cloud, applications, and integration services; advancing zero trust adoption; automating controls; improving observability; remediating vulnerabilities; and securing acquired environments.
Responsibilities
- Implement Secure-Default Controls: Design, deploy, and maintain security controls across the network, infrastructure, hybrid cloud environments (AWS and Azure), application delivery, and integration services, following architecture team standards
- Drive Zero Trust Adoption: Apply zero trust access models, including verification of identity, device state, and request context, when onboarding new and acquired environments. Grant access by identity rather than network trust
- Develop Controls as Code: Build and maintain policies, infrastructure modules, and automation scripts (PowerShell, Python, Terraform, or equivalent) to deliver preventive controls by default. Tune control rigor according to data sensitivity
- Enhance Observability & Monitoring: Configure and operate telemetry for asset and configuration visibility, access activity monitoring, and exposure management. Ensure new environments achieve visibility upon integration, and support detection and remediation through data layer partnerships
- Reduce Exposure & Remediate Findings: Implement compensating controls (segmentation, access restriction, virtual patching, egress control, feature disablement, credential-scope reduction, enhanced monitoring) and remediate findings swiftly, following architecture team guidance
- Manage Findings at Scale: Use fleet-wide tools to address high volumes of findings, migrate off-standard legacy and acquired systems to standardized builds, and provide evidence for validation and closure
- Support Risk Quantification: Provide GRC with key environment data—such as asset criticality, data classification, exposure state, and dependency mapping—and automate risk scoring to ensure current, consistent risk information
- Assist Acquisition Integration: Execute repeatable onboarding, migration, and decommissioning processes to bring acquired firms onto standardized environments using identity-based integration patterns
Skills
- Bachelor's degree in Computer Science, Information Security, or equivalent practical experience
- 4–8 years of hands-on experience in security engineering, systems/network engineering with a security focus, or a similar technical area
- Solid experience implementing and operating security controls in hybrid cloud environments (AWS and/or Azure), including network, infrastructure, or application delivery
- Hands-on experience with identity and access management (Okta, Entra ID, MFA, privileged access), with the ability to configure identity as a primary security control
- Proficiency in automation and scripting (PowerShell, Python, Terraform, or equivalent), plus experience in CI/CD, infrastructure-as-code, or policy-as-code toolchains
- Working knowledge of NIST CSF, CIS Controls, and defense-in-depth; ability to apply these as practical engineering guidance
- Proven vulnerability management and remediation experience (CVSS, EPSS, CISA KEV), including prioritizing findings and implementing fixes or compensating controls
- Strong collaboration skills across engineering, infrastructure, and GRC to implement controls and resolve findings
- Security certifications (Security+, SSCP, AWS Security Specialty, Microsoft SC-200/AZ-500, or progress toward CISSP)
- Experience in regulated industries with audit/examination involvement; financial industry background and Reg S-P familiarity are a plus
- Experience supporting high-volume acquisition integration
- Exposure to securing AI or agentic systems (workload identity, tool authorization, data boundaries)
- Demonstrated ability to deliver security capabilities through automation over manual processes
Benefits
- Progressive opportunities
- Professional growth support
- Support to achieve career goals
- Camaraderie and teamwork
- Work-life balance
Company Overview
Company H1B Sponsorship