Information Security Engineer, EverCommerce

• While AWS, Linux, and Windows administration experience is ideal, it will not be part of your primary responsibilities
• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent experience
• 3+ years in information security, with a focus on threat detection, incident response, and vulnerability management
• Proficiency in CrowdStrike, Orca Security, Elastic SIEM, and Burp Suite
• Familiarity with compliance standards (HIPAA, PCI, SOX, and EHNAC) and experience supporting audit processes
• Hands-on experience with vulnerability assessment and penetration testing methodologies
• Strong knowledge of Linux and Windows system administration
• Proficiency in AWS cloud and O365 security practices and administration (preferred)
• Strong problem-solving skills with the ability to prioritize and manage multiple tasks
• Excellent verbal and written communication skills for explaining security findings and recommendations
• Detail-oriented and proactive, with a passion for staying current on cybersecurity trends and threats

Desirable

• We are looking for an experienced Information Security Engineer to join our security team
• In this role, you will focus on implementing, monitoring, and enhancing our security measures
• You’ll work with a range of security tools and platforms, including CrowdStrike, Orca, and Elastic SIEM, to ensure the confidentiality, integrity, and availability of our data and systems
• Your role will also include threat detection, penetration testing, and supporting compliance efforts related to industry regulations
• Security Monitoring and Incident Response: Utilize Elastic SIEM to continuously monitor and analyze security alerts. Respond to incidents swiftly and effectively, implementing corrective actions as needed
• Compliance and Regulatory Standards: Ensure adherence to industry-specific regulations such as HIPAA, PCI-DSS, SOX, and EHNAC by participating in regular audits, implementing compliance-related security measures, and preparing documentation
• Threat Detection and Proactive Security: Use CrowdStrike, Orca, and Elastic SIEM to identify, analyze, and respond to security threats in real-time. Conduct threat hunting activities to proactively seek out malicious activity and vulnerabilities
• Vulnerability Assessment and Penetration Testing: Perform regular vulnerability assessments using Orca, Crowdstrike, and Burp Suite. Report findings, recommend mitigations, and collaborate with development teams to resolve security gaps
• Security Incident Management: Investigate, document, and respond to security incidents and alerts. Coordinate with the IT and Development teams to mitigate any security threats
• Issue Tracking and Project Management: Use JIRA for managing issues, tracking project progress, and ensuring timely resolution of security tasks and incidents