Information Security Engineer II - Remote

Overview

The Engineering team at JustAnswer is seeking a dedicated Information Security Engineer to design, implement, and enhance our security infrastructure and maturity. Collaborating with cross-functional teams, you will ensure robust system security. Your expertise in information security and cybersecurity will be vital in delivering secure solutions for clients and employees. Familiarity with AI services and leveraging AI to enhance the efficiency and quality of security operations is highly desirable.

In Short

• Detect and respond to potential security threats, intrusions, and anomalous activities.
• Monitor security incidents, ensuring timely resolution and documentation.
• Manage anti-malware solutions and system alerts.
• Develop and enforce security policies, procedures, and guidelines.
• Conduct employee security awareness training.
• Ensure compliance with standards like PCI-DSS 4.0 and support audits.
• Perform vulnerability assessments and oversee remediation efforts.
• Manage access controls and enforce the principle of least privilege.
• Review and optimize network security controls.
• Participate in the Security Committee and forensic investigations.
• Implement recommendations from Security Incident Reports (SIRs).
• Lead and manage the security team.

Requirements

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Minimum 5 years of experience in information security, with a focus on PCI-DSS compliance preferred.
• Strong knowledge of security principles, risk management, and incident response.
• Relevant certifications (CISSP, CISM, or CISA) are a plus.
• Excellent communication, analytical, and problem-solving skills.
• Experience in developing and maintaining security policies and procedures.
• Ability to work independently and collaboratively.

Benefits

• Experience leading SOX and PCI audits.
• Familiarity with completing Cybersecurity Insurance questionnaires.
• Proficiency in leveraging AI services to enhance Information Security support and operations.