Information Security Engineer II

Job Summary

Owning the design and implementation of security controls, the full-time remote Information Security Engineer II will focus on securing web applications and Azure cloud environments while mentoring junior engineers and driving security practices across the CI/CD pipeline.

Key Responsibilities

• Independently design, implement, and tune security controls for web applications, including Web Application Firewalls (WAF)
• Drive the integration and automation of security practices across the CI/CD pipeline while collaborating with stakeholders
• Architect and implement security solutions for identity management, endpoint security, and data loss prevention (DLP) in the corporate environment

Required Qualifications

• 3-5 years of experience in an Information Security Engineering role with a focus on application and enterprise security
• Proven experience securing web applications and cloud environments, particularly Microsoft Azure
• Strong experience with security automation, scripting (PowerShell, Python), and Infrastructure as Code (Bicep, Terraform)
• In-depth knowledge of web application firewalls (WAF), network security, and identity and access management (IAM)
• Familiarity with Agile methodologies and a strong understanding of DevSecOps principles