01Overview
Summary
The Senior Information Security Engineer owns, administers, and continuously improves core enterprise security platforms. This P4-I role requires senior-level independent judgment, deeper technical ownership, and solid delivery accountability, with expectations to lead complex platform activities, improve operational maturity, and provide senior-level support across email security, web security, network security, endpoint detection and response (EDR), data loss prevention (DLP), vulnerability management, and security automation.
The role is suited for an ownership-driven engineer who can operate independently, mentor junior engineers, partner with SOC and infrastructure teams, and help maintain a resilient enterprise security posture.
Key Responsibilities
Security Platform Ownership: Own administration, health, configuration, lifecycle support, upgrades, tuning, and operational readiness for assigned security platforms.
Email & Web Security: Administer and optimize secure email gateways, web filtering, and web reputation controls to reduce phishing, spam, malware, and risky web access exposure.
Network & Endpoint Security: Maintain network security controls and EDR/XDR coverage across Windows and Linux settings, including agent health, policy tuning, troubleshooting, and escalations.
Data Loss Prevention (DLP): Lead DLP policy validation, tuning, exception review support, and control effectiveness checks to protect confidential corporate and customer data.
Vulnerability Management: Perform scanning, analyze results using tools such as Tenable, Cortex, Qualys, or similar platforms, and provide prioritized remediation guidance.
Security Automation & Scripting: Develop and maintain automation using Python, PowerShell, Bash, APIs, or SOAR workflows to reduce manual effort and improve repeatability.
Incident Investigation & Escalation: Provide senior technical support for alert triage, telemetry validation, containment scoping, and investigat .
