Job Description
Apex Cyber Defense is a premier technology firm in the heart of Columbus, Ohio, dedicated to protecting enterprise infrastructure from evolving cyber threats. We are seeking a highly skilled Senior Information Security Engineer to join our elite security operations team. In this role, you will be instrumental in architecting robust security frameworks, driving zero-trust initiatives, and ensuring the integrity of our global data ecosystem.
We offer a competitive compensation package, comprehensive benefits, and a culture that fosters continuous learning and innovation. If you are passionate about cybersecurity and want to make a tangible impact in a dynamic market, we want to hear from you.
Responsibilities
- Architect, deploy, and manage advanced security solutions, including SIEM, SOAR, and endpoint protection systems.
- Lead and execute complex incident response investigations, performing forensic analysis to mitigate threats and prevent recurrence.
- Conduct regular vulnerability assessments, penetration testing, and security audits to identify and remediate weaknesses.
- Develop and maintain detailed security policies, procedures, and compliance documentation (SOC 2, HIPAA, GDPR).
- Collaborate with IT and DevOps teams to integrate security controls into the software development lifecycle (DevSecOps).
- Monitor security alerts and traffic patterns using advanced analytics tools to detect anomalous behavior.
Qualifications
- Bachelor’s degree in Computer Science, Information Security, or related field; Master’s degree preferred.
- Certified Information Systems Security Professional (CISSP) or equivalent advanced certification.
- 5+ years of progressive experience in cybersecurity, including at least 2 years in a senior engineering role.
- Strong proficiency with SIEM tools (e.g., Splunk, QRadar) and scripting languages (Python or Bash).
- Deep understanding of network protocols, cloud security (AWS/Azure), and identity management systems.
- Excellent problem-solving skills and the ability to communicate complex technical concepts to non-technical stakeholders.