Information Security Solutions Engineer II
Holman Enterprises1 day ago
Remote, United StatesMid Level
Base Salary
$105k - $150k/yr
Responsibilities
- Review cloud security solutions and contribute to secure architecture designs for Azure and AWS environments.
- Provide security architecture guidance and design patterns to infrastructure, cloud, and development teams.
- Build, deploy, and maintain security infrastructure as code using Terraform, Terragrunt, ARM, and Bicep.
- Perform third-party vendor security reviews, document findings, and recommend mitigations or acceptance criteria.
- Support the security architecture and operation of enterprise AI platforms, including MCP gateways, LLM routers, and AI gateways.
- Perform application threat modeling and support vulnerability remediation through verified closure.
- Support identity security involving managed identities, service principals, least privilege, secrets handling, and application authentication and authorization.
- Administer and maintain cloud security posture, runtime application security, API security testing, and related developer workflow tooling.
- Support penetration testing providers with scoping, attack surface assessment, results triage, and remediation tracking.
- Report vulnerability exposure, remediation status, and risk to application owners and management.
- Participate in cloud and application security incident response, investigation, containment, and remediation.
- Lead delegated initiatives or workstreams and share secure design and coding practices with peers and developers.
Requirements
- 5–7 years of combined information security and technical engineering experience, including significant cloud security, application security, or related experience.
- Strong experience securing Microsoft Azure and Amazon AWS environments in cloud-native and hybrid architectures.
- Hands-on experience with Terraform and ARM and/or Bicep; Terragrunt experience is a plus.
- Ability to read and reason about application code in at least one of .NET, Python, Ruby, or Node.js.
- Working knowledge of OWASP Top 10, OWASP API Security Top 10, threat modeling such as STRIDE, and secure software development practices.
- Knowledge of Entra ID, AWS IAM, managed identities, service principals, RBAC, least privilege, OAuth 2.0, and OpenID Connect.
- Experience operating cloud and application security tools, API security platforms, and manual application testing tools such as Burp Suite or OWASP ZAP.
- Experience conducting third-party vendor security assessments and familiarity with edge, WAF, and CDN platforms.
- Working knowledge of Microsoft Windows and Microsoft 365, including Entra ID and Intune.
- Familiarity with MITRE ATT&CK, NIST CSF, NIST 800-53, CIS Controls, and ISO 27001/27002.
- Strong scripting ability in Python or PowerShell.
- Preferred experience includes incident response, EDR, SIEM investigations, detection engineering, AI security, cloud FinOps, observability, container and Kubernetes security, penetration testing, and relevant compliance standards.
- Preferred certifications include CISSP, GIAC, OSCP, AWS Security Specialty, or Azure Security Engineer AZ-500.
- Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent work experience.
Benefits
- Remote position, indicated by the #LI-REMOTE posting designation.
- Full-time health, vision, dental, life, and disability insurance.
- Flexible Spending and Health Savings Accounts and an Employee Assistance Program.
- 401(k) plan with company match.
- Paid time off, paid holidays, bereavement leave, and jury duty leave.
- Paid pregnancy and parental leave and supplemental paid military leave for eligible employees.
- Tuition reimbursement.
About Holman Enterprises
Holman Enterprises is a privately held, family-owned automotive services company providing fleet management and leasing, vehicle upfitting and fabrication, parts and powertrain distribution, insurance, and retail vehicle sales for commercial and consumer customers. Headquartered in Mount Laurel, NJ, it operates globally and includes one of the largest privately owned dealership groups in the United States. Its revenue comes from service contracts and subscriptions, leasing, parts logistics, insurance products, and dealership sales.