Information Security Platform Engineer

Role: Information Security Platform Engineer

Location: Blue Bell, PA

100% Remote

Job Description

We are seeking an experienced Information Security Platform Engineer (Contractor) for a 6-month engagement to support and enhance our information security tooling and operations. This role is 100% remote, working normal U.S. business hours, and will be provided through a consulting/contracting firm for pricing and staffing purposes.

The contractor will focus on building, operationalizing, and providing Tier 2 support for key security technologies while partnering closely with our internal Information Security and IT teams.

Required Skills:

4+ years of hands-on experience in one or more of the following:

o Information Security Engineering

o Incident Response / Security Operations

o IT Infrastructure Engineering with strong security tooling exposure

Practical experience implementing and supporting security controls and platforms such as:

o Endpoint protection and EDR

o Email security

o Network security controls

o Vulnerability management

o Secure cloud configurations

Strong troubleshooting and problem-solving skills with the ability to work independently.

Experience collaborating with cross-functional technical teams in a remote environment.

Excellent written and verbal communication skills, with the ability to communicate clearly to both technical and non-technical stakeholders.

Familiarity with at least one industry regulation or framework (e.g., NIST, CIS, SANS, MITRE ATT&CK, HIPAA, HITRUST).

Job Duties:

Build, configure, and provide Tier 2 support for security tools, including but not limited to:

o SIEM

o IDS/IPS

o Web Application Firewall (WAF)

o Next-Generation Antivirus / Endpoint Protection

o Email security gateways

o Vulnerability management platforms

o Asset discovery and inventory tools

o Cloud security controls Operationalize existing security tools through:

o Control validation and tuning o Enablement of new features

o Platform upgrades aligned to security objectives

Partner with Information Security and IT teams to improve Security Operations Center (SOC) efficiency and effectiveness.

Support investigation of escalated security incidents in collaboration with the SOC, including:

o Identifying unauthorized activity

o Assisting with containment and remediation

o Contributing technical findings and documentation to incident reports

Perform root-cause analysis related to security tool outages or performance issues and provide remediation recommendations.

Assist with preparation and responses for external audits, penetration tests, and vulnerability assessments.

Produce clear technical documentation and knowledge transfer for internal teams.

Job

Requirements

• Required Experience & Skills
• 4+ years of hands-on experience in one or more of the following:
• o Information Security Engineering
• o Incident Response / Security Operations
• o IT Infrastructure Engineering with strong security tooling exposure
• Practical experience implementing and supporting security controls and platforms such as:
• o Endpoint protection and EDR
• o Email security
• o Network security controls
• o Vulnerability management
• o Secure cloud configurations Strong troubleshooting and problem-solving skills with the ability to work independently.
• Experience collaborating with cross-functional technical teams in a remote environment.
• Excellent written and verbal communication skills, with the ability to communicate clearly to both technical and non-technical stakeholders.
• Familiarity with at least one industry regulation or framework (e.g., NIST, CIS, SANS, MITRE ATT&CK, HIPAA, HITRUST).

Preferred Qualifications

• Hands-on experience with cloud and cloud security platforms (AWS, Azure, or GCP).
• Prior experience operationalizing or maturing SOC tools.
• Security certifications such as CISSP, CISM, CEH, or CompTIA Security+ are a plus
• Deliverables & Outcomes
• The consulting firm should expect the contractor to:
• Maintain stable and effective operation of assigned security tools Improve reliability and detection quality of existing security platforms
• Contribute to faster and more effective incident response
• Provide clean documentation and knowledge transfer to internal teams by the end of the engagement
• Desired Skills & Experience:
• This role is intended to augment an existing Information Security team and does not include people-management responsibilities.
• Pricing should reflect a senior-level individual contributor with strong security engineering hands-on expertise.
• The contractor must be able to perform all responsibilities with or without reasonable accommodation.
• This is a remote position.