Security Engineer in Level Access

Working with the Director of Information Security, the Security Engineer at Level Access will be responsible for helping Level Access meet its goal of being the most secure company in digital accessibility. Primary responsibilities include: supporting the multi-framework compliance program; providing crucial business support with second-party audits and other customer-focused requests; defending the business against threats and malicious actors; handling and operating the security awareness apparatus to test and strengthen our weakest link – the humans; and, bringing improvements and efficiencies to our operations and procedures.ResponsibilitiesOperate the security awareness apparatus including course design, phishing simulations, and reporting (Security Awareness Orchestration)Assist with regular FedRAMP upkeep requirements by completing recurring weekly, monthly and quarterly compliance tasks (FedRAMP Continuous Monitoring)Perform regular compliance activities to ensure we are meeting regulatory, contractual and internal compliance objectives (Compliance Operations)Perform initial triage of disparate security signals and events to determine severity and potential business-impacting incidents (Security Alert Triage)Supervise and analyze vulnerability management tools and fosters to provide remediation guidance to downstream teams (Vulnerability Triage)Undertake small projects to mitigate risk, enhance compliance, facilitate business operations, or improve efficiency (Business Analysis)Connect with internal and external stakeholders as the need arises to collect information when conducting security governance tasks and facilitating compliance audits (Audit Support)Support core business activities by providing timely responses to security questions and questionnaires, internal integration requests, and vendor requests (Business Support)QualificationsBachelor's degree in Computer Science, Information Security, or related field and three to five years of experience, or equivalent work experience of four to six years.Solid understanding of networking protocols, operating systems, and cloud computing platforms (e.g., AWS, Azure, GCP, Microsoft 365).Experience with security tools and technologies, such as SIEM, IDS/IPS, DLP, vulnerability scanners, and security assessment tools.Familiarity with common information security standards or catalogues such as the AICPA SOC 2, ISO 27001, CSA STAR, CIS, or NIST SP 800-53b.Exposure to building SaaS applications and/or modern software engineering practices.Analytical and problem-solving skills, with the ability to prioritize and handle multiple tasks in a fast-paced environment.Communication and interpersonal skills, with the ability to work collaboratively.Attention to detail and a proactive approach to identifying and mitigating security risks.Dedication to continuous learning and professional development in the field of cybersecurity.Desired, but not required Interest or prior experience within compliance or data privacy Security certifications and/or formal education Understanding of web accessibilityApplication ProcessSalary is commensurate with experience. This is a full-time, salaried position with acompetitive benefits package. If working on a small team of high impact developers sounds like something you'd enjoy, send us your resume and cover letter in English. If you seem like a good fit, we'll be in touch. Level Access is committed to workforce diversity. Equal Opportunity Employer. Copyright 2024, Level Access. All rights reserved. Show more Show less Position level Assistant Type of employment Full-time Job responsibilities Information Technology Industries IT services and IT Consulting