{"id":3256665,"url":"https://alion.io/job/etrepid-information-security-engineer-2","title":"Information Security Engineer","company":{"id":697390,"name":"eTrepid","domain":"etrepid.com","url":"https://alion.io/company/etrepid","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CMMC","optional":false},{"name":"DLP","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-25T23:29:34Z","employer_posted_date":null,"last_verified_at":"2026-10-25T23:29:34Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Job Overview: As a member of the Information Security Program Team, the Information Security Engineer is responsible for participating in all aspects of planning, deploying, documenting, monitoring, & maintaining the layered security to protect the confidentiality, integrity, and availability within the corporate and client facing infrastructures. This position will focus on protecting system boundaries, keeping systems and infrastructure hardened against attacks and securing highly sensitive data, along with securing user and computer identities.\nKey Responsibilities:\nPerform engineering, tuning, and provide guidance of network security controls & hardening including IDS/IPS, Web Filtering, Cloud Technologies, Email/Spam, and Firewalls.\n\nPerform engineering, tuning, and guidance to the Information Security Team for incident response & SIEM management.\n\nExperienced in cloud security and compliance for Azure and AWS.\n\nManage and support Identity and Access Management.\n\nSupport the investigation and resolution of security incidents.\n\nPerform Security User Awareness Training and Phishing campaigns.\n\nPerform vulnerability management as well as support penetration testing and remediation.\n\nPerform engineering, tuning, & provide guidance of mobile & endpoint security controls & hardening including AV, Endpoint Detection & Response, DLP, & encryption.\n\nTranslate security controls and requirements into system specification requirements.\n\nPerform 3rd party vendor risk management assessments.\n\nPlan, develop, and enhance security standards, requirements gathering, and engineer security solutions across the risk and technology portfolio.\n\nAssist in designing computer security architecture and develop detailed cyber security designs.\n\nEngineer, implement and monitor security measures for the protection of computer systems, storage, infrastructure, and cloud applications.\n\nDefine system security requirements, identify vulnerabilities, and coordinate remediation plans.\n\nSupport and coordinate risk assessments and security evaluations for vendors deploying solutions either on premise or in the cloud.\n\nParticipate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations.\n\nPlan and coordinate the deployment of security and vulnerability patching to all computer systems.\n\nPrepare and document standard operating procedures and standards.\n\nDevelop technical solutions and select and implement new security tools to help mitigate security vulnerabilities and automate repeatable tasks.\n\nWrite comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.\n\nPlan/automate/deploy new infrastructure and security capabilities.\n\nParticipates in security awareness trainings, webinars, and podcasts designed as a Subject Matter Expert (SME).\n\nAdept at Presenting in-person and virtual to customers, partners, and executives.\n\nEligibility Requirements:\nBS degree in Computer Science, Information Systems or equivalent experience preferred.\n\nCISSP certification required.\n\n Industry certifications preferred: CISA, CISM, CEH, GIAC, or equivalent.\n\n8+ years of relevant experience focusing on security analysis.\n\n3+ years of experience performing Network Security with expertise configuring Firewalls, Network IDPS systems, Data-Loss Prevention (DLP), VPN, Proxy/Web content filtering, WAF, NAC, Zero-Trust, GRE/IPSec, and/or Network segmentation.\n\nExperience managing and configuring Vulnerability Management tools, Cloud Security (including CASB & M365), Identity and Access Management tools, and/or Multi-Factor authentication\n\n3+ years of experience performing Endpoint Security with expertise configuring AV and/or MDR/EDR solutions, hardening Windows Server and Workstation OS, and/or MDM and Mobility.\n\nExperience performing SIEM management and tuning, incident response, forensics, playbook development, and/or SOAR tools.\n\nAbility to employ procedures, methods, and tools for identifying, representing, and formally assessing the important aspects of alternative decisions (options) to make an optimum (e.g. best possible) decision.\n\nExperience with IT governance and/or risk.\n\nStrong knowledge of network & infrastructure security architecture.\n\nExperience working with Linux and Windows operating systems.\n\nExperience with Microsoft Azure, IaaS, PaaS, SaaS, NaaS platforms\n\nDetailed and thorough knowledge of incident analysis and response concepts and techniques, including incident tracking process, root cause, lessons learned and process improvements.\n\nKnowledge of compliance standards and security frameworks (COBIT, NIST, HIPAA, ISO27001/2, OWASP, PCI)\n\nKnowledge of security regulations, frameworks and security requirements that impact SMB market (GLBA, HIPAA, PCI, NIST 800-171, NIST 800-53, NIST -CSF, CMMC)\n\nExcellent analytical and problem-solving skills with the ability to work under pressure.\n\nHigh level of personal integrity, with the ability to professionally handle confidential matters while leveraging the appropriate level of judgment.\n\nStrong interpersonal and communication skills.\n\nAbility to work well under stressful environments.\n\nAbility to work extended hours and weekends when required.\n\nIf you have an interest and meet these requirements, we encourage you to apply online! \n\nMust be a United States citizen to Apply.\n\nAbility to gain a security clearance.\n\nEOE Principles only. \n\neTrepid is an Award-winning Veteran Owned Managed Security Service Provider (MSSP) located in and certified by the state of Maryland. We provide complete and comprehensive fully Managed Cyber Solutions that deliver on all five tenants of the NIST framework. eTrepid also remains on the forefront of industry changes such as regulations associated with the Cybersecurity Maturity Model Certification (CMMC). \nThe sun never sets on eTrepid, partnering with global leaders in IT enables our client systems to be monitored and serviced by seasoned and certified professionals in real time 24 hours a day, seven days a week, 365 days a year. We can even put boots on the ground in all 50 states. \nOriginally posted on Himalayas","description_format":"text","description_chars":6186,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Defense Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-26T02:28:45Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":11,"reasons":["seen:1","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/etrepid-information-security-engineer-2","json_url":"https://alion.io/job/etrepid-information-security-engineer-2.json","meta":{"generated_at":"2026-10-27T17:31:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7198,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":697390},"rest":"https://alion.io/mcp/rest/get_company?id=697390"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fetrepid-information-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fetrepid-information-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fetrepid-information-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/etrepid-information-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fetrepid-information-security-engineer-2"}]}