INFORMATION SECURITY ENGINEER

Job Title: INFORMATION SECURITY ENGINEER
Experience: 10 Years
Loc: San Jose CA (hybrid)
Duration: long term
We are seeking a highly skilled Information Security Contractor to support Mergers & Acquisitions (M&A) initiatives. This role requires deep hands-on experience securing corporate IT environments across Windows Linux and macOS platforms with strong expertise in identity endpoint security cloud security and enterprise security controls. The contractor will play a critical role in security due diligence risk assessment and secure integration or separation of environments during M&A activities.

Key Responsibilities


Perform information security due diligence for M&A transactions
Assess and document security risks across acquired or merging environments
Review secure and integrate corporate network and identity infrastructures
Execute hands-on security tasks related to:

Active Directory (domains forests trusts GPOs migrations)
DNS architecture security and remediation
Linux and macOS system security hardening


Evaluate and deploy Endpoint Detection & Response (EDR) solutions
Assess backup and disaster recovery (DR) capabilities and gaps
Review and secure public-facing and internal websites including TLS WAFs and configuration
Conduct and manage vulnerability management programs (scanning prioritization remediation tracking)
Implement and align security controls with CIS Controls
Design and enforce Data Loss Prevention (DLP) strategies
Secure Microsoft 365 / Office 365 environments (identity email data and collaboration security)
Assess and improve cloud security posture (AWS Azure GCP or hybrid environments)
Collaborate with IT infrastructure cloud legal and compliance teams
Produce clear risk assessments remediation plans and executive-ready documentation
Support security incident response related to M&A activities


Required Skills & Experience


10 years of experience in Information Security Infrastructure and Network Security
Strong hands-on experience securing enterprise environments across:

Windows Linux and macOS
Active Directory and enterprise identity platforms
DNS and network services
Securing external facing web applications


Proven experience with:

EDR/XDR tools
Vulnerability scanning and remediation workflows
Backup and disaster recovery strategies


Solid understanding of:

Identity and Access Management (IAM)
Zero Trust and least-privilege principles
Enterprise security architectures


Experience supporting M&A projects including due diligence integration and carve-outs
Ability to assess risk quickly in complex time-sensitive environments


Preferred Qualifications


Experience with Azure AD / Entra ID Intune and hybrid identity
Strong knowledge of Office 365 security (Defender Purview Conditional Access DLP)
Experience with cloud security controls and CSP-native security tools
Familiarity with security frameworks (CIS NIST ISO 27001)
Security certifications such as CISSP CISM CCSP or Microsoft security certifications
Consulting or contractor experience in fast-paced M&A environments


Soft Skills


Strong analytical and problem-solving skills
Ability to work independently with minimal supervision
Excellent communication skills with technical and non-technical stakeholders
Comfortable operating under aggressive M&A timelines
Strong documentation and reporting skills

Required Skills:

INFORMATION SECURITYAZUREWINDOWSLINUXAWS