Our industry-leading, immigration-specific applications and technology are undergoing tremendous transformation and security is on the critical path to success in that endeavor. A professional who is passionate about security, capable of effecting change, and ready to take on new challenges, is what we seek. You will be joining a small team of Security Engineers who help make security a distinguishing factor in our immigration software and service offerings. A successful candidate will work with stakeholders across multiple functional areas including IT Operations, Development, and Product Management to deliver systems and services which are secure by design and default.

How you will make a difference as a Security Engineer – Infrastructure at Fragomen:

• Collaborate across functional boundaries to design secure solutions which meet organizational objectives
• Stay informed about security best practices and methods for existing and emerging technologies
• Define workflows for collecting project requirements, use cases and diagrams as inputs to security requirements
• Deliver security guidance which aligns with NIST, ISO, SOC2 and other frameworks based on inputs
• Identify gaps in security controls and recommend corrective measures
• Contribute to the improvement of the Firm’s security posture and maturation of the security program
• Perform tasks related to threat detection and disruption, surface area reduction, and incident response
• Operate and maintain security tools
• Participate in cyber security investigations

Let’s talk if you have the following qualifications and experience:

• A passionate team player who builds knowledge and solves complex problems
• 3 to 5 or more years of security engineering or combination of IT operations and security engineering experience
• Proficiency in security tools, system and network administration, configuration management tools, scripting, e.g. PowerShell, bash
• Proficiency in a modern high-level language (Python, Java, Javascript, PHP) a plus
• Experience with cloud native security tools a plus
• Expertise in IAM, PAM and Data Protection tools a plus
• Strong, professional communication skills that maintain under pressure
• One or more technical certifications that demonstrate expertise in cyber security, e.g. GSEC, CISSP, OSCP or a specialization, e.g. AWS SCS-C01, Microsoft SC-400
• BA degree in a related field or a combination of related experience