Senior IT Security Engineer at Foley, evolving enterprise security program for SaaS offerings and compliance standards. Collaborating with teams to ensure system, data, and user protection.
Responsibilities
Design, implement, and manage comprehensive security solutions including SIEM, DLP, EDR, DNS filtering, and encryption across cloud and on-prem environments.
Administer firewalls, VPNs, and network security infrastructure with a focus on segmentation, least privilege, and Zero Trust principles.
Lead vulnerability management efforts, including scanning, prioritization, patching, and remediation workflows.
Oversee and optimize endpoint detection and response (EDR) tools such as Rapid7 and AWS GuardDuty.
Manage identity and access management (IAM) systems, including SSO, Multi-Factor Authentication (MFA), Microsoft Entra ID (Azure AD), and Active Directory Group Policy.
Conduct privileged account and user access reviews.
Partner with IT and DevOps to embed security in CI/CD pipelines and automate controls where possible.
Contribute to incident response efforts, from detection to root cause analysis and remediation.
Leverage existing platforms and tools to develop and improve detection, response and containment workflows.
Respond to real-time monitoring and alert triage for anomalies across SaaS and infrastructure platforms.
Conduct post-incident reviews and implement proactive controls to prevent recurrence.
Contribute to disaster recovery and business continuity planning and exercises.
Serve as the technical lead for the security team, mentoring junior engineers and driving cross-functional security initiatives.
Partner with Infrastructure, Engineering, and Compliance to integrate security into all stages of system design and delivery.
Represent Foley in discussions with auditors, vendors, and internal stakeholders on all matters related to cybersecurity and compliance.
Advocate for security awareness and education across the organization.
Manage vendor security reviews using ticketing and vendor management solutions.
Evaluate new tools, vendors, and partners through a security-by-design lens.
Collaborate with the Compliance department in support of both internal and external audit efforts, including SOC 2 engagements and PCI-DSS internal audits.
Requirements
Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
CISSP, SSCP, or equivalent certifications (completed or in progress).
5+ years of experience in IT security engineering, with strong exposure to cloud and hybrid environments.
Proven experience with:
Microsoft Entra ID (Azure AD), Active Directory, and Group Policy Management
Single Sign-On (SSO) and Identity Federation (SAML, OIDC, OAuth 2.0)
AWS security architecture, IAM roles, and network security groups
Endpoint and network security tools, EDR, SIEM, SOAR, and vulnerability scanner
Familiarity with cloud access security solutions is a plus.
Familiarity with containerization or serverless workload solutions, such as Kubernetes, is a plus.
Head of Infrastructure & Security at Kinatico, a RegTech leader, focused on cloud infrastructure and security governance. Leading a technically deep team of cloud engineers and security specialists in a hybrid environment.
Security Engineer at KAYAK responsible for implementing security improvements and managing security tools in Berlin office infrastructure. Collaborating with teams to monitor incidents and enhance security protocols.
Security Shift Manager overseeing security operations at WarHorse Gaming Omaha. Responsible for team safety, compliance with regulations, and staffing in the security department.
Security Supervisor responsible for loss prevention and safety at WarHorse Gaming casino in Omaha. Ensuring compliance with regulations and managing security team operations.
Security Product Owner at Dell Technologies responsible for Lab Services and Operations. Translate strategy into initiatives while collaborating with cross - functional leaders in security engineering and Agile delivery.
Security Director overseeing lab services and operations, ensuring compliance and security across global sites. Leading teams and integrating secure strategies for innovation and productivity.
Security Shift Manager responsible for safety operations at WarHorse Gaming Omaha. Supervising security staff and ensuring compliance with laws and regulations.
Security Supervisor managing safety and loss prevention for WarHorse Gaming in Omaha. Ensures compliance and oversees the security department operations on the casino floor.
Security Architect leading AI trust and governance strategies for Fortune 500 with Salesforce. Empowering organizations with cutting - edge security solutions in a collaborative environment.
Information Security Manager responsible for ensuring security of data, systems, and networks at Cayuse. Leading development and monitoring of security policies, practices, and controls.