$Not specified
Design and implement AI-powered security workflows to enhance security operations and reduce manual intervention. Manage cloud security posture and ensure compliance while collaborating with internal teams to address security vulnerabilities.
A bachelor's degree in a related field is required, along with demonstrated experience in AI tools and automation platforms. Candidates should have hands-on experience with security monitoring tools and a strong grasp of network and cloud security.
We are seeking a Security & IT Engineer who leverages AI-first thinking to reshape how security is designed, scaled, and maintained. This isn’t a traditional security role - we want someone who can harness AI tools, automation, and creative scripting to build intelligent security solutions that scale with our business. You’ll be our automation architect, using AI to eliminate manual processes and predict threats before they happen. If you’re excited about using generative AI to write detection rules, building generative workflows for incident response, or creating intelligent dashboards that surface insights before they’re requested, this role is for you. This hybrid position combines forward-leaning security engineering with essential IT operations, making you a key player in our technology infrastructure’s protection and efficiency. In this role, the Information Security Engineer must be knowledgeable about security frameworks and possess both deep and wide expertise in the security space. What you'll do: Security Engineering & Automation Design and implement AI-powered security workflows that reduce manual intervention and response times (detection, alert triage, compliance reporting, etc.) Leverage AI tools (ChatGPT, Claude, etc.) to enhance incident response, threat detection, and compliance operations Create intelligent systems for continuous compliance monitoring and reporting using our existing security tools Develop and maintain security automation for onboarding/offboarding processes, access controls, and device compliance Orchestrate vulnerability management: scanning, triage, remediation and tracking Use AI tools to analyze security metrics, identify trends, and generate actionable intelligence Manage and optimize our security stack IT Infrastructure & Ops Support cloud security posture in cloud infrastructure and SaaS environments Manage corporate identity and access management systems with a security-first approach Ensure secure device configuration and lifecycle management Provide escalated technical support for infrastructure and endpoint issues Ensure secure configuration and monitoring of corporate IT infrastructure Act on privacy breaches and malware threats Analyze IT specifications to assess security risks Collaborate with internal teams to ensure closure of security vulnerabilities Governance, Risk, and Compliance Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement Develop and maintain incident response playbooks and procedures Lead internal security awareness efforts, from phishing tests to trainings Develop and carry out information security plans and policies Minimum Qualifications & Credentials BSc/BA in Computer Science, Information Technology, or a related field Professional certification (e.g. CompTIA Security+, CISSP) is a plus Demonstrated experience with AI tools and automation platforms Experience Hands-on experience with vulnerability scanners, endpoint protection, and security monitoring tools Proven track record automating security and IT workflows using APIs, webhooks, and cloud-native tooling Proficiency in Python, Bash, or similar scripting languages for automation Strong grasp of network security, endpoint protection, and cloud security Experience with endpoint management, user support, and IT infrastructure Experience with log analysis and SIEM platforms (experience with budget-conscious solutions a plus) Proven work experience as a System Security Engineer or Information Security Engineer Hard/Technical Skills Understanding of OWASP, NIST, CSF, MITRE ATT&CK, and common security frameworks Detailed technical knowledge of database and operating system security Familiarity with web related technologies (web applications, web services, service oriented architectures) and of network/web-related protocols An analytical mind with excellent problem-solving ability Excellent written and verbal communication skills for both technical and business audiences Decision-making skills and ability to manage multiple initiatives simultaneously with minimal supervision Why You’ll Love Working Here At ConsumerAffairs, your voice matters. We foster a collaborative environment where you’re encouraged to take initiative, experiment boldly, and grow professionally. We're committed to work-life harmony, career development, and celebrating wins together. Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development
This job posting was last updated on 9/24/2025