> Markdown version of [/jobs/ext/1405703-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/1405703-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer - **Company:** ALKU - **Location:** Andover, MA, United States (Remote available) - **Experience:** Experienced - **Salary:** $150,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing Security, Cyber Security, Domain Name System Security Extensions, Domain Name System (DNS), Multi-Factor Authentication, Intrusion Detection and Prevention, Intrusion Detection Systems, Virtual Private Networks (VPN), Network Security, Routing, Network Segmentation, Remote Access Technology, Azure Active Directory, Phishing, Zero Trust Network Access, Security Information and Event Management, Virtual Local Area Networks, Wide Area Networks, Computer Networking Systems, Computer Network Technologies, Firewalls (Computer Science), Information Technology, Microsoft Sentinel - **Published:** July 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=3111ac504e4d6a0b ## About the Role Required * 7+ years of progressive information security experience, with 2-3+ years in a senior or lead role * Networking knowledge: IP, routing/switching, firewall architecture, VPN, VLANs, DNS, IDS/IPS - a background in network engineering or network security is a strong differentiator * Hands-on experience with SIEM platforms, EDR tools, and threat detection/response workflows; familiarity with MDR/MSSP platforms preferred * Experience managing or overseeing MSSPs and/or MSPs in an enterprise or mid-market environment * Strong command of the Microsoft 365 security stack: Defender suite, Entra ID, Conditional Access * Ability to develop security strategy and communicate risk clearly to non-technical leadership Education * Bachelor's degree in Computer Science, Information Security, Information Technology, or related field preferred; equivalent experience considered Preferred * CISSP, CISM, CCNP Security, CompTIA CASP+, or equivalent certification * Experience with SASE, SD-WAN, or Zero Trust network architecture * Familiarity with Microsoft Sentinel, Defender compliance tooling * Cloud security experience (Azure, AWS a plus) * Familiarity with CMMC 2.0 or NIST Controls ## Description You will own ALKU's day-to-day cybersecurity operations and long-term security strategy, serving as the primary internal liaison to our Managed Security Service Provider (MSSP) and our Managed Service Provider (MSP). You bring deep security engineering experience, a strong networking foundation, and the ability to communicate risk clearly to leadership. Security Strategy & Governance * Drive and maintain ALKU's cybersecurity roadmap and controls, aligning initiatives with business risk and priorities * Establish and communicate security policies, standards, and procedures across the organization * Report on security posture and program maturity to senior leadership * Help drive risk assessments, remediation planning, and evaluate security investments and vendors * Serve as ALKU's primary point of contact with MSSP and MSP managing alert tuning, detection coverage, response playbooks, and regular business reviews * Ensure SLAs and security commitments from both partners are met Incident Monitoring, Triage & Response * Oversee detection, triage, escalation, and response to security incidents * Partner with MSP to maintain ALKU's incident response plan, tabletop exercise program, and post-incident review process * Provide on-call escalation support during high-severity incidents; occasional after-hours availability required * Analyze security data, alerts, and logs to identify risks and trends; maintain up-to-date awareness of the evolving threat landscape * Work with MSP and MSSP to tune Automatic Response Plays, SIEM and EDR tooling to reduce noise and improve detection Network, Endpoint & Infrastructure Security * General understanding of networking expertise to assess and improve ALKU's security architecture (firewalls, VPN, network segmentation, DNS security, and Zero Trust initiatives) * Review and advise on network changes, cloud connectivity, remote access design, and firewall rule sets in partnership with the MSP * Work with MSP to oversee Microsoft 365 and Entra ID (Azure AD) security configuration, Conditional Access, and MFA enforcement * Assess and advise on cloud security posture across Azure, SaaS platforms, and custom applications at ALKU Compliance, Awareness & Reporting * Lead the security awareness training program including phishing simulations and role-based education * Maintain accurate security incident records, documentation, and audit-ready evidence libraries * Prepare regular security reports for internal stakeholders ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)