[Remote] Senior Security Engineer (MSP or MSSP) - Remote (USA)

Note: The job is a remote job and is open to candidates in USA. Echelon Risk + Cyber is a leading cybersecurity consulting firm dedicated to defending human rights to security and privacy. They are seeking a highly skilled Senior Security Engineer to implement and enforce security policies, conduct assessments, and design secure cloud solutions while collaborating with clients and cross-functional teams.ResponsibilitiesImplement and enforce security policies and procedures based on industry standardsConduct regular security assessments, audits, and ensure compliance with security standardsDesign and implement secure cloud solutions (Azure and AWS)Utilize Cloud Security Posture Management (CSPM) technologiesEnsure the security of SaaS platforms, including email, file sharing, and 3rd party applicationsConfigure and manage security controls for servers and endpoints, including deploying and managing endpoint protection solutionsImplement security policies for Mobile Device Management (MDM)Conduct regular vulnerability scans and automated penetration tests utilizing in-house tools and develop remediation plans for identified vulnerabilitiesImplement and manage IAM solutions, including single sign-on (SSO) and privileged access management (PAM)Ensure proper user provisioning and access controlsLead technical implementations of data protection services, including Data Loss Prevention (DLP) solutionsParticipate in the development and maintenance of disaster recovery plans and proceduresReview and ensure backups, redundancy, and replication solutions meet availability and recovery best practices, including performing regular recovery testsConduct security reviews, assessments, and hardening activities across key systems from endpoints, servers, network infrastructure, and Cloud servicesApply and enforce security configuration benchmarks (e.g., CIS, NIST)Ensure compliance with regulatory requirements and industry standardsImplement and manage security information and event management (SIEM) systemsDeploy and maintain managed detection and response (MDR), intrusion detection systems (IDS), and intrusion prevention systems (IPS)Configure and manage network security policies across perimeter and internal network equipment, including firewalls and wireless access pointsParticipate in incident response planning and tabletop exercises, and develop incident response plans and playbooksAssist with the implementation and configuration of security awareness training programs and solutionsWork closely with clients to understand their security needs and provide tailored solutionsCollaborate with cross-functional teams to ensure security is integrated into all aspects of IT infrastructure, and develop technical security standards and operational proceduresSkillsBachelor's degree in Computer Science, Information Security, or related fieldRelevant certifications: CCSP, CISSP, CEH, CISM, etcExperience working in managed IT or Security services (MSP or MSSP), handling numerous clients and environments simultaneouslyStrong understanding of security technologies and frameworksExcellent problem-solving and analytical skillsStrong communication and interpersonal skillsApplicants must have authorization to work in the United States without current or future visa sponsorshipFamiliarity with regulatory requirements such as FFIEC, SOC 2, ISO 27001, GDPR, CMMC, HIPAA, PCI-DSS, etcFamiliarity with popular security frameworks such as CIS, NIST, ISO, SOC2Experience with enterprise security technologies (firewalls such as Palo Alto and FortiGate, endpoint security tools such as CrowdStrike, SentinelOne, and FortiEDR)Experience working in or with a Security Operations Center (SOC)Experience participating in Security Assessments and Audit effortsFamiliarity with DevSecOps practices and toolsAbility to be agile and juggle multiple clients, initiatives, and priorities effectivelySkilled in gathering, assessing, and presenting technical security metrics and trendsBenefitsAccess to medical, dental, and vision insurance through Cigna, with the majority of the employee cost covered by the employerEmployer funding to HSA accounts and FSA accessAccess to a 401(k) through Vanguard with a guaranteed employer contributionFlexible vacation policy that allows you to manage your schedule and rest and recharge when you need to11 holidays with flexibility based on what is important for you and those you loveFamily-friendly benefits, including weeks off for Maternity leave, weeks off for non-birthing parent leave, employer-paid short-term and long-term disability, employer-paid life insurance, and access to additional life insurance, hospital coverage, accidental coverage, discounted mental health support, and moreSupport for individual development through certifications, continued learning, conferences, and moreCompany OverviewEchelon Risk + Cyber is a cybersecurity and IT risk advisory services firm. It was founded in 2021, and is headquartered in Austin, Texas, USA, with a workforce of 51-200 employees. Its website is https://echeloncyber.com.