Information Security Engineer

As the Information Security Engineer at Integrity you are responsible for protecting Integrity Express Logistics systems networks applications and data by developing implementing and maintaining effective information security controls and practices. This role combines hands-on security engineering with risk assessment vulnerability management incident response and continuous improvement of the Companys information security capabilities.

The Information Security Engineer partners closely with Technology Engineering Infrastructure and other business teams to identify security risks implement appropriate safeguards and support secure technology operations. This position monitors the evolving threat landscape evaluates vulnerabilities responds to security incidents and helps ensure security considerations are incorporated into technology solutions and business processes.

This position reports to the Senior Vice President Technology Solutions.

** Must be able to work onsite in Cincinnati OH on a weekly basis or as business needs require.

Core Responsibilities

Security Engineering Infrastructure & Controls

• Design implement configure maintain and continuously improve security technologies infrastructure and controls that protect the Companys applications endpoints networks systems and data.
• Configure administer and troubleshoot security tools and technologies including endpoint protection firewalls authentication and access controls intrusion detection and prevention systems content filtering and network monitoring solutions.
• Partner with Technology and Engineering teams to support secure system configurations architectures and implementations.
• Evaluate and recommend enhancements to security tools controls and technologies to strengthen the Companys security posture.

Vulnerability Management Security Testing & Risk Assessment

• Conduct security risk assessments and vulnerability evaluations to identify potential weaknesses threats and areas of exposure.
• Perform and/or coordinate internal and external vulnerability scans analyze findings prioritize risks and drive remediation efforts with appropriate stakeholders.
• Conduct or coordinate security testing activities including vulnerability scanning phishing simulations configuration reviews and other control effectiveness assessments.
• Track remediation progress and provide recommendations to reduce risk and improve control effectiveness.

Security Monitoring Threat Management & Incident Response

• Monitor security systems logs and alerts to identify suspicious activity potential security incidents and emerging threats.
• Investigate security events document findings and coordinate incident response containment recovery and remediation activities.
• Maintain awareness of evolving cybersecurity threats attack techniques vulnerabilities and industry trends evaluating potential impacts to the Company.
• Recommend and implement improvements to detection response and monitoring capabilities to reduce future risk.

Security Program Application Security & Advisory Support

• Support the development implementation maintenance and continuous improvement of the Companys information security program policies standards procedures and technical controls.
• Partner with Engineering Infrastructure and Technology teams to integrate security considerations into the design implementation and operation of systems and applications.
• Provide guidance and recommendations related to operating systems networks databases web applications cloud environments and other technology platforms.
• Assist in translating security requirements into practical and scalable solutions that support business and technology objectives.

Security Awareness Documentation & Continuous Improvement

• Partner with stakeholders to develop and deliver security awareness initiatives training programs and employee education related to cybersecurity best practices.
• Provide guidance on information security responsibilities phishing awareness data protection and emerging security risks.
• Maintain accurate documentation of security configurations incidents risks controls assessments and remediation activities.
• Identify opportunities to improve security processes operational effectiveness and the overall maturity of the Companys security program.
• Perform other duties and responsibilities as assigned.

Knowledge/Skills/Experience

Required Qualifications

• Bachelors degree in Computer Science Information Security Information Technology Cybersecurity or a related field or an equivalent combination of education and relevant experience.
• Minimum of 5 years of experience in information security cybersecurity engineering security operations or a related technology security role.
• Demonstrated experience implementing operating and maintaining enterprise security technologies systems and controls.
• Experience identifying assessing prioritizing and remediating security vulnerabilities and technology risks.
• Working knowledge of network endpoint operating system application database and infrastructure security principles.
• Experience with security technologies such as endpoint protection firewalls identity and authentication solutions intrusion detection/prevention content filtering vulnerability management and network or security monitoring tools.
• Knowledge of cybersecurity principles security protocols access controls vulnerability management and incident response practices.
• Experience investigating and responding to security incidents and documenting findings and corrective actions.
• Ability to analyze complex technical information identify potential risks and develop practical solutions.
• Strong analytical technical and problem-solving skills.
• Strong written and verbal communication skills including the ability to communicate security risks and recommendations to both technical and non-technical stakeholders.
• Ability to work effectively across Technology Engineering Infrastructure and business teams while managing multiple priorities.

Preferred Qualifications

• Experience supporting or helping mature an enterprise information security program.
• Experience with cloud security identity and access management security information and event management (SIEM) vulnerability management and endpoint detection and response (EDR) technologies.
• Familiarity with recognized cybersecurity frameworks and standards such as NIST Cybersecurity Framework CIS Controls or similar industry frameworks.
• Relevant professional certification such as CISSP Security GIAC CISM or another information security certification.
• Experience working in an environment where security controls must balance operational requirements business needs and technology risk.

Physical Requirements

• Ability to sit or stand at a desk for prolonged periods of time.
• Ability to lift up to 15 lbs.

This position operates primarily in a remote work environment. Occasional work outside of normal business hours may be required to support software releases production issues or other critical technology initiatives. Limited travel may also be necessary for meetings training and company-sponsored events.

We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or an accommodation due to a disability you may contact us at or call 1- ext. 4.