Sr Information Security Specialist

What We're Looking For

This opportunity entails serving as a senior individual contributor responsible for leading the operational execution of complex information security activities that protect HNTB systems, applications, networks, and information. The position serves as a senior technical resource and escalation point for security incidents, technology implementations, control deficiencies, and other complex security matters. Working within established information security priorities and standards, the position coordinates cross-functional technical efforts, improves operational processes, and helps ensure assigned security capabilities are implemented and operating effectively.

What You’ll Do:

• Leads investigation and operational response to complex security incidents, including evidence analysis, containment coordination, remediation tracking, case documentation, and escalation to Information Security management.
• Serves as a senior technical escalation point for security events, vulnerabilities, configuration concerns, control deficiencies, and operational issues that cannot be resolved through standard procedures.
• Leads the technical implementation, configuration, integration, testing, and operational transition of security technologies and controls within approved project scope and organizational direction.
• Coordinates complex remediation activities across infrastructure, applications, cloud services, identity platforms, data environments, vendors, and other technology teams.
• Provides senior operational oversight for assigned security capabilities, including procedures, technical configurations, control execution, metrics, issue management, and continuous improvement.
• Manages security workstreams and technical projects by coordinating activities, dependencies, testing, risks, documentation, communications, and implementation readiness.
• Conducts advanced security assessments of technologies, applications, architectures, configurations, and processes; documents findings and recommends practical remediation options to Information Security management and technology owners.
• Develops and improves operational procedures, playbooks, technical standards, automation, monitoring, reporting, and quality-control practices for assigned security activities.
• Performs other duties as assigned.

What You’ll Need:

• Associate’s Degree in Computer Science or related degree and 8 years of relevant experience, or
• In lieu of education, 10 years of relevant experience; information security, information technology operations

What You'll Bring:

• Maintains advanced technical knowledge across multiple information security domains and deep expertise in one or more assigned areas.
• Applies security policies, standards, architecture requirements, and management direction to implementations and operational decisions.
• Independently analyzes and resolves complex technical, operational, and control-related security issues.
• Communicates complex security matters clearly and provides technical guidance and mentorship as a senior individual contributor.
• Evaluates practical options for meeting security objectives, communicates technical and operational trade-offs, and escalates barriers requiring management decisions.

What We Prefer:

• CEH, CISM, CISSP, GSEC, CompTIA Security+ certifications or licenses preferred
• Experience conducting security risk assessments, documenting findings, and recommending practical remediation options.
• Experience with security policy and standards creation, interpretation and maintenance.
• Demonstrated knowledge of applying system security principles, policies and regulations.

• Experience implementing, configuring, integrating, and operating enterprise security solutions.
• Experience with one or more of the following solutions: SASE, DSPM, DLP and/or PAM.

Additional Information

Click here for benefits information: HNTB Total Rewards

Click here to learn more about Equal Opportunity Employer/Disability/Veteran

.

Locations:

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

NOTICE TO THIRD-PARTY AGENCIES:

HNTB does not accept unsolicited resumes from recruiters or agencies. Any staffing/employment agency, person or entity that submits an unsolicited resume to this site does so with the understanding that the applicant's resume will become the property of HNTB. HNTB will have the right to hire that applicant at its discretion and without any fee owed to the submitting staffing/employment agency, person or entity. Staffing/employment agencies who have fee agreements with HNTB must submit applicants to the designated HNTB recruiter to be eligible for placement fees.