Security Engineer I at trueml

About the Role

TrueML is seeking an Information Security Engineer to join their InfoSec team. This role involves working across multiple departments and with security partners to identify and address information security issues, maintain compliance, and implement security solutions.

Key Responsibilities

• →Harden cloud-based infrastructure
• →Create and maintain Vulnerability Management program including detection, analysis, reporting, and remediation assistance
• →Build and update network and system diagrams
• →Implement security controls including firewalls, AWS Security Groups, Two Factor Authentication, anti-virus, anti-phishing, and DDOS mitigation
• →Conduct regular security assessments such as vulnerability scans and penetration tests to maintain compliance
• →Design and track security metrics
• →Assist in gathering evidence for security audits and compliance reviews for standards like PCI and ISO 27001
• →Utilize Gen Ai to perform analysis on malware, threat intelligence, and security logs
• →Assist in day-to-day operation and monitoring of security tools including SIEM systems, IDS/IPS, endpoint protection, and firewalls
• →Assist with initial incident response activities including evidence gathering, documentation, and threat containment
• →Help maintain and update security documentation including procedures, runbooks, and configuration guides