Principal Engineer of Infrastructure & Data Security

Our client, a leading insurance agency, is looking for a contract-to-hire Principal Engineer for Infrastructure & Data Security Engineering. The Principal Engineer for Infrastructure & Data Security Engineering will be a key technical lead and a member of a diversified team of security technology professionals. In this role, you will be responsible for the identification, implementation, administration, and continual improvement of the security solutions to ensure that all information assets and associated technology, applications, systems, infrastructure, and processes are adequately protected in the digital ecosystem in which the organization operates. The technologies that you would be primarily responsible are Endpoint Detection and Response, Network Detection and Response, Micro and Nano Segmentation, Email Security, Data Security etc. You will have the opportunity to work with cutting-edge technologies to tackle advanced security threats in a collaborative, agile environment. Preference will be given to candidates local to the Orlando, Florida area but remote candidates will also be considered.

• Technical design, implementation and maintenance of multiple information security technologies such as such as Endpoint Detection and Response, Network Detection and Response, Micro and Nano Segmentation, Email Security, Data Security etc.
• Participate in Information Security organization's security testing planning and executions.
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
• Perform the daily operation and execution of security-related tools, processes and controls related to cyber defense initiatives
• Lead transformation workshops across security, network, application, authentication and Enterprise Architecture teams to challenge, design and plan for a next gen Zero Trust model for Security
• Collaborate with cross-functional teams and regularly articulate and communicate to diverse audiences and properly translates security and risk management terminology into business terms and recommends solutions to these stakeholders
• Develop processes, procedures to examine and measure risk and implement appropriate risk mitigation methodologies
• Help coordinate and drive remediation of identified risks and control deficiencies
• Contribute to general enterprise architecture framework and strategy development and enhancements
• Attend and participate in application projects and change management committee meetings. This includes interacting with business units and technical teams to understand what is coming and how projects can be more secure from the beginning to build a secure by design approach
• Remain current with new security threats and assess systems to ensure they can defend the business

• Minimum of 10 years of experience in the area of Information Security domain
• Should have worked in more than one technology such as Cloud Access Security Broker, Web Content Filtering, Data Loss Prevention, Zero Trust Network Access, in last 3 years in subject matter expert or senior engineer
• Should have minimum of 2+ years' experience in architecting security solution
• Must be willing to handle hand on role and flexible with non-business hour support as and when required
• Should have knowledge and experience in Defense in Depth model and Zero Trust architecture
• Should be well versed with Cloud technologies especially Azure and Microsoft O365
• Preferred candidates with knowledge of security frameworks such as CIS, NIST CSF etc. that inform risk and design
• Should have experience working with products such as Netskope, Zscaler, Vectra, Mimecast, Proofpoint, Crowdstrike
• Good to have cybersecurity certification such as Security+, CISSP, CISM, CCSP, etc.