Senior Information Security Engineer (Applications)

We were founded in 1993 on the simple belief that we can save the world from our competition by solving the insurance industry’s most challenging problems with innovative solutions and extraordinary service. As one of the leading international travel insurance and specialty benefit management companies in the world, we service over 800,000 customers each year including international travelers, US government agencies, corporations, foreign governments, and insurance companies.
They are our guide to how we treat each other and our customers. Our culture is what makes us “us” it is the unique vibe you feel when you walk through our doors, the passion we bring to creating innovative solutions and the extra mile we go to put our customers first. It is a way of feeling and behaving toward each other and our customers. Customers come first
The Information Security Engineer is an integral member of the Infrastructure and Operations team and the broader Information Technology organization. This role is responsible for protecting Seven Corners information assets, systems, networks, and data by implementing, monitoring, and continuously improving security controls, processes, and technologies.
The Information Security Engineer plays a critical role in identifying, assessing, and mitigating cybersecurity risks across on-premises, cloud, and SaaS environments. Working closely with Infrastructure, Operations, Application Development, Compliance, and business stakeholders, this position helps develop and implement security best practices that support the organizations security, regulatory, and business objectives.
This role is responsible for the administration, monitoring, and improvement of security technologies, including endpoint protection, SIEM, identity and access management, vulnerability management, email security, web application firewalls, intrusion detection and prevention systems, cloud security platforms, and related security tools.
The Information Security Engineer will investigate security incidents, conduct threat and vulnerability analysis, coordinate remediation efforts, and support security awareness and governance initiatives. The role will also participate in maintaining and improving the organizations Information Security Management System (ISMS), supporting internal and external audits, risk assessments, security policies, and ongoing compliance efforts aligned with ISO 27001 and other applicable regulatory and security frameworks (e.g., A strong understanding of cloud infrastructure, identity management, security architecture, and modern cybersecurity practices is required. Deep knowledge of network protocols, application security, threat detection, incident response, and endpoint security is highly desirable.
Design, implement, and maintain security controls across identity, endpoint, network, cloud, and infrastructure environments
Administer and optimize security technologies, including SIEM, EDR, MFA, Conditional Access, Identity and Access Management, and Data Loss Prevention
Monitor the organizations security posture and proactively identify, assess, and remediate vulnerabilities and security risks
Investigate, contain, and support the resolution of security incidents and other cybersecurity events
Participate in security architecture reviews and provide security guidance for projects, system implementations, and technology initiatives
Automate security monitoring, reporting, and operational processes to improve efficiency and effectiveness
Support the organizations Information Security Management System (ISMS), including risk assessments, security policies, compliance initiatives, and audit activities
Evaluate organizational compliance with applicable regulatory frameworks through annual gap assessments and remediation planning
Conduct third party vendor security risk reviews
Bachelor’s degree in Information Technology with a focus on Information Security, or a closely related field, or equivalent experience required
~Experience with Microsoft security technologies, including Microsoft Defender, Microsoft Sentinel, Entra ID, Active Directory, Intune, Group Policy, Purview, and other Microsoft 365 security services
~ Proficiency administering enterprise security tools and platforms
~ Experience with vulnerability management, threat detection, incident response, and security monitoring
~ Working knowledge of ISO 27001, NIST Cybersecurity Framework (CSF), CIS Controls, along with HIPAA and PCI DSS compliance frameworks
~ Experience supporting security audits, risk assessments, policy development, and compliance initiatives
~ Knowledge of cloud security concepts across Microsoft Azure and SaaS platforms
~ If you have the aptitude and attitude, we can help you grow your career through training, mentoring, increasing responsibility, and being around other rock star employees.
All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, age, status as a protected veteran, among other things, or status as a qualified individual with disability.