[Remote] Security Engineer

Note: The job is a remote job and is open to candidates in USA. PnT Data Corp. is a growing company with a strong track record in information security. The Security Engineer will work with the CISO to design and implement security controls and ensure compliance with regulatory requirements.

Responsibilities

• Design, implement, and maintain security controls within AWS, including Identity & Access Management (IAM), networking, logging, and encryption
• Design, implement, and maintain security controls within an enterprise Windows environment, including logging, encryption, and access controls
• Design, implement, and maintain endpoint security controls, including endpoint firewalls, endpoint detection & response (EDR), and application allow-listing
• Design, implement, and maintain network security controls, including email protection, data loss prevention (DLP), intrusion detection, and firewalls
• Design, implement, and maintain security controls within a Microsoft 365 environment
• Help track and report on risk remediation metrics, including internal risks and third-party risk management (3PRM)
• Manage vulnerability scanning tools and prioritize remediation
• Establish and enforce secure configuration baselines for systems and resources
• Monitor security alerts and logs; investigate and respond to security incidents and suspicious activity
• Improve enterprise log collection, detection, and response using SIEM, EDR, and cloud-native security tooling
• Support compliance efforts with HIPAA, HITRUST, and SOC 2; assist with audits, evidence collection, and documentation
• Support engineering teams with application security
• Work with every business team, including finance, sales, and customer support, to ensure security requirements are understood and effectively implemented
• Develop, maintain, and improve procedures, standards, and documentation

Skills

• Passionate about information security and eager to learn
• Humble and able to listen constructively
• Candid, courageous, and willing to speak honestly
• Knowledgeable of security fundamentals
• Proficient in writing and verbal communication
• Able to work independently, self-manage, and balance multiple responsibilities
• Able to collaborate and maintain productivity while working remotely
• Three or more years of experience in security engineering, cloud security, or infrastructure security
• Two or more years hands-on AWS experience; AWS Security Specialty certification preferred
• Experience in designing and deploying enterprise logging and monitoring; Splunk experience preferred
• Experience in triaging, investigating, and resolving security alerts
• Hands-on experience in configuring and maintaining endpoint and network security controls; Crowdstrike, Zscaler, ThreatLocker experience preferred
• Experience in vulnerability scanning and management
• Experience with healthcare data protection requirements and working with sensitive data in regulated industries
• Familiarity with security risks and controls related to artificial intelligence

Company Overview