Overview:
We are seeking a highly skilled Security Engineer I to join our Information Security team. This role will play a key part in managing, administrating, reporting and operationalizing our security solutions across cloud and on-premises environments. The Security Engineer I will collaborate with IT Security, Infrastructure and Application teams to ensure that security processes and standards are embedded into technology solutions. This role requires a strong technical foundation, analytical mindset, and a willingness to learn and grow within a cybersecurity engineering team.
Responsibilities:
- Manage the day-to-day operations and processes of security solutions following the organization’s enterprise security strategy, business goals and regulatory requirements.
- Serve as a technical administrator, monitoring and managing security solutions across network, endpoint, cloud, identity, and application layers.
- Assist in the operation of security technologies, ensuring scalability, resilience, and alignment with security configuration management best practices.
- Perform routine vulnerability scans and assist with remediation tracking to verify corrective actions and security controls.
- Maintain Security Tools and Technologies so they are up to date and functioning as expected.
- Assist with evidence collection for audits and regulatory requirements.
- Operationalize new security tools, platforms, and services to improve the organization’s security posture.
- Collaborate with infrastructure and application teams to ensure secure system and application processes.
- Support incident response activities as needed and monitor the incident queue to assure incidents are assigned and addressed within documented SLA.
- Assist with developing and maintaining security standards, policies, operational procedures and process documentation.
- Work with IT Security staff and contribute to a culture of security awareness across the organization.
- Performs other functionally related duties as assigned.
Qualifications:
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent professional experience).
- 2+ years of experience in information security engineering or IT security.
- Proven experience in security solution administration and operational designs.
- Knowledge of Networking Fundamentals including understanding of TCP/IP, DNS, DHCP, routing, VPNs, firewalls, and network protocols.
- Fundamental knowledge of PowerShell, Python, Bash, or similar scripting languages.
- Hands-on experience with security technologies such as Vulnerability Management (Tenable preferred), SIEM, EDR, IAM, PAM, cloud security platforms, DLP, and firewalls.
- Understanding of cloud platforms (Azure, AWS, or GCP) and hybrid identity environments (e.g., Entra ID/Azure AD, on-prem AD).
- Demonstrated experience in the analyzing and problem solving of security related tickets/requests and escalation.
- Knowledge of security frameworks and regulations (NIST CSF, ISO 27001, HIPAA, PCI, SOX, NYDFS, etc.).
- Excellent communication skills, with the ability to define and present recommendations for application/operational enhancements.
- Industry certifications such as CISSP, OSCP, GIAC (or equivalent) are a plus.
#LI-BL1
What We Offer:
AmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities. Our benefits include: Medical & Dental Plans, Life Insurance, including eligible spouses & children, Health Care Flexible Spending, Dependent Care, 401k Savings Plans, Paid Time Off.
AmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.
AmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.