Information Security Specialist

Job Title: Information Security Engineer

Public Consulting Group LLC (PCG) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve lives.

As a key member of our team, you will play a pivotal role in safeguarding PCG's information, brand, digital assets, and its people. The Information Security Engineer will be responsible for identifying gaps, vulnerabilities, and potential threats, conducting risk assessments, developing, identifying, and deploying security solutions to mitigate risks.

This position requires an expert in the field of security with a deep understanding of the latest security threats, vulnerabilities, and mitigation strategies. If you have a passion for information security, a strong technical background, and exceptional analytical skills, we encourage you to apply.

Key Responsibilities:

• Security Architecture Review and Design: Evaluate existing cloud-based security architectures, systems, and frameworks to identify weaknesses and areas for improvement.
• Recommend enhancements to security architectures to enhance resilience and mitigate emerging threats.
• Develop cloud-relevant security controls, leveraging tools such as cloud security posture management (CSPM), cloud access security brokers (CASB), Data Loss Prevention (DLP), and access management (IAM) solutions.
• Design and recommend comprehensive security solutions to protect PCG's infrastructure, systems, and data.
• Provide timely feedback on all security-related aspects of project designs and architectures, highlighting areas of risk and/or non-compliance with requirements.
• Stay abreast of industry trends and emerging technologies to proactively adapt security architectures to evolving threats with a focus on telecommuter workforce and cloud-based infrastructure.

Risk Gap Assessment:

• Conduct comprehensive risk and coverage gap assessments of cloud-based infrastructure, applications, and data to identify vulnerabilities and security gaps.
• Analyze cloud-specific security risks, including misconfigurations, data breaches, and unauthorized access, and prioritize remediation efforts accordingly.
• Develop risk mitigation strategies and action plans to address identified vulnerabilities and ensure compliance with cloud security standards and regulations.
• Develop and implement security policies, assist with security audits, risk assessments, and penetration testing to identify potential security gaps, and recommend measures to address the identified risks.
• Analyze security risks and prioritize remediation efforts based on potential impact and likelihood of occurrence.

Stakeholder Communication:

Communicate security risks, issues, and recommendations to various stakeholders and senior management. Provide regular updates to the management and on the status of assessments, reviews, and designs. Conduct security training and awareness sessions as required for other team members.

Continuous Improvement:

Stay updated on the latest security trends, threats, and technologies. Recommend improvements to security processes and practices to enhance the organization's security posture. Participate in professional development opportunities to maintain and enhance security expertise.

The above is intended to describe the general contents and requirements of work being performed by people assigned to this classification.

It is not intended to be construed as an exhaustive statement of all duties, responsibilities, or skills of personnel so classified.

Qualifications:

Bachelor's degree in computer science or engineering, Information Technology, or related field

Minimum of 3 years of experience in cloud security engineering, risk assessment, and architecture design

Proficiency in cloud security technologies and tools, including Firewalls, WAFs, SIEM, DLP, CSPM, CASB, IAM, and cloud-related security controls

Hands-on experience in such technologies will be preferred. Strong understanding of security principles, standards, and frameworks (e.g., NIST, ISO 27001, CSA, CIS Controls). Relevant certifications such as Certified Cloud Security Professional (CCSP), AWS Certified Security Specialty, or Azure Security Engineer Associate preferred.

Strong knowledge of security principles, practices, and technologies. Experience with security risk assessment and management methodologies. Proficiency in designing and implementing secure architectures and solutions. Understanding and experience in deployment IT infrastructure e.g. Active Directory, DNS, Email services, Web services, hosted applications. Familiarity with industry standards and regulations. Excellent problem-solving and analytical skills. Ability to support multiple projects simultaneously and meet deadlines. Strong communication (verbal and written) and interpersonal abilities. Ability to work collaboratively in a team environment.

This position is remote with travel/onsite requirements. PCG is a remote-friendly organization and is committed to creating a culture where remote work remains a vital part of the company's success.

To be successful in a remote work role at PCG, you must:

be available during your set working hours

have a safe, private, and distraction-free environment in which to complete your work, and be able to give your full attention to the completion of your PCG job duties

Some travel to the office or elsewhere may be required for team meetings, client meetings, etc.

We are accepting applications on an ongoing basis until filled.

As required by applicable law, PCG provides the following reasonable range of compensation for this role:

$120,000-135,000

LI-AH1 D-PCG LI-remote

Compensation for roles at Public Consulting Group varies depending on a wide array of factors including, but not limited to, the specific office location, role, skill set, and level of experience. As required by applicable law, PCG provides the following reasonable range of compensation for this role below. In addition, PCG provides a range of benefits for this role, including medical and dental care benefits, 401k, PTO, parental leave, bereavement leave.

Public Consulting Group is an Equal Opportunity Employer dedicated to celebrating diversity and intentionally creating a culture of inclusion.

We believe that we work best when our employees feel empowered and accepted, and that starts by honoring each of our unique life experiences.

At PCG, all aspects of employment regarding recruitment, hiring, training, promotion, compensation, benefits, transfers, layoffs, return from layoff, company-sponsored training, education, and social and recreational programs are based on merit, business needs, job requirements, and individual qualifications.

We do not discriminate on the basis of race, color, religion or belief, national, social, or ethnic origin, sex, gender identity and/or expression, age, physical, mental, or sensory disability, sexual orientation, marital, civil union, or domestic partnership status, past or present military service, citizenship status, family medical history or genetic information, family or parental status, or any other status protected under federal, state, or local law.

PCG will not tolerate discrimination or harassment based on any of these characteristics.

PCG believes in health, equality, and prosperity for everyone so we can succeed in changing the ways the public sector, including health, education, technology, and human services industries, work.

Public Consulting Group is an equal opportunity employer.

All qualified applicants receive consideration for employment without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity, protected veteran status, or status as a qualified individual with a disability.

VEVRAA Federal Contractor.

---