Note: The job is a remote job and is open to candidates in USA. PnT Data Corp. is a growing company with a strong track record in information security. The Security Engineer will work with the CISO to design and implement security controls and ensure compliance with regulatory requirements.
Responsibilities
- Design, implement, and maintain security controls within AWS, including Identity & Access Management (IAM), networking, logging, and encryption
- Design, implement, and maintain security controls within an enterprise Windows environment, including logging, encryption, and access controls
- Design, implement, and maintain endpoint security controls, including endpoint firewalls, endpoint detection & response (EDR), and application allow-listing
- Design, implement, and maintain network security controls, including email protection, data loss prevention (DLP), intrusion detection, and firewalls
- Design, implement, and maintain security controls within a Microsoft 365 environment
- Help track and report on risk remediation metrics, including internal risks and third-party risk management (3PRM)
- Manage vulnerability scanning tools and prioritize remediation
- Establish and enforce secure configuration baselines for systems and resources
- Monitor security alerts and logs; investigate and respond to security incidents and suspicious activity
- Improve enterprise log collection, detection, and response using SIEM, EDR, and cloud-native security tooling
- Support compliance efforts with HIPAA, HITRUST, and SOC 2; assist with audits, evidence collection, and documentation
- Support engineering teams with application security
- Work with every business team, including finance, sales, and customer support, to ensure security requirements are understood and effectively implemented
- Develop, maintain, and improve procedures, standards, and documentation
Skills
- Passionate about information security and eager to learn
- Humble and able to listen constructively
- Candid, courageous, and willing to speak honestly
- Knowledgeable of security fundamentals
- Proficient in writing and verbal communication
- Able to work independently, self-manage, and balance multiple responsibilities
- Able to collaborate and maintain productivity while working remotely
- Three or more years of experience in security engineering, cloud security, or infrastructure security
- Two or more years hands-on AWS experience; AWS Security Specialty certification preferred
- Experience in designing and deploying enterprise logging and monitoring; Splunk experience preferred
- Experience in triaging, investigating, and resolving security alerts
- Hands-on experience in configuring and maintaining endpoint and network security controls; Crowdstrike, Zscaler, ThreatLocker experience preferred
- Experience in vulnerability scanning and management
- Experience with healthcare data protection requirements and working with sensitive data in regulated industries
- Familiarity with security risks and controls related to artificial intelligence
Company Overview