Senior Information Security Engineer

Company: Company

Company Description
Grove Gigs is a technology-focused organization that supports clients with reliable, scalable, and secure network solutions. The company emphasizes remote collaboration, flexible work arrangements, and modern infrastructure to help teams deliver high-quality services from anywhere. Grove Gigs values problem-solving, accountability, and continuous improvement, encouraging team members to stay current with emerging technologies and industry best practices. Joining Grove Gigs offers the opportunity to work on diverse enterprise security environments and contribute to long-term client success.
Role Description
This is a full-time role for a Senior Information Security Engineer serving as the senior technical leader for the organization's Information Security program. This position is responsible for the design, implementation, administration, optimization, and continuous improvement of enterprise security technologies, processes, and controls while helping drive the overall security strategy of the organization. The engineer provides technical leadership and mentorship to Information Security staff and serves as the primary resource for vulnerability management, security operations, risk reduction initiatives, incident response coordination, security architecture reviews, and compliance efforts. Day-to-day responsibilities include leading the vulnerability management program (identification, prioritization, remediation tracking, and risk reporting); managing and optimizing enterprise security platforms including vulnerability management, endpoint protection, identity security, email security, and monitoring solutions; conducting security architecture reviews across infrastructure, cloud, networking, and application initiatives; and leading security investigations, incident response, root cause analysis, and post-incident remediation. The person in this role will partner with Infrastructure, Cloud, and Network teams to ensure security controls are properly implemented; develop and maintain enterprise security standards, policies, procedures, and technical baselines; perform risk assessments and recommend mitigations; support regulatory, compliance, audit, and cybersecurity insurance requirements; evaluate emerging security technologies; develop security metrics, dashboards, and executive-level reporting; contribute to the long-term Information Security roadmap; coordinate with vendors, auditors, and third-party partners; and assist with disaster recovery, business continuity, and security testing. Participation in maintenance windows, incident response activities, security investigations, and audit support efforts may be required.
Qualifications
* Strong understanding of Information Security principles, risk management frameworks, and industry best practices, with a minimum of 5 years of Information Security experience.
* Advanced knowledge of vulnerability management processes and remediation strategies, with hands-on experience supporting vulnerability management programs.
* Experience with enterprise security technologies including endpoint protection, vulnerability management, identity and access management, multifactor authentication, email security, and security monitoring platforms.
* Strong understanding of enterprise networking, firewalls, segmentation, VPN technologies, and cloud security concepts.
* Experience conducting security investigations and coordinating incident response activities.
* Strong knowledge of security architecture, defense-in-depth principles, and zero-trust concepts.
* Ability to communicate technical security risks to both technical and non-technical audiences, with strong documentation, presentation, and communication skills.
* Ability to mentor and develop technical staff, with experience leading enterprise security initiatives, projects, or technical teams preferred.
* Strong analytical and problem-solving skills, with the ability to manage multiple priorities in a fast-paced enterprise environment.
* Experience working within regulated or compliance-driven environments preferred.
* Minimum of 7–10 years of Information Technology experience.
* Industry certifications such as CISSP, CISM, Security+, GSEC, GIAC, or equivalent preferred.
* Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent practical experience.

apply