> Markdown version of [/jobs/ext/3465417-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/3465417-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Engineer

- **Company:** Health Plans Inc
- **Location:** United States
- **Experience:** Experienced
- **Salary:** $92,000.0 - $109,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Windows, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Data Security, Identity and Access Management, Microsoft Security Essentials, Azure Active Directory, Cloud Services, Zero Trust Network Access, Software Vulnerability Management, Data Classification, Microsoft InTune, Falcon Platform, CIS Benchmarks, Vulnerability Analysis
- **Published:** September 16, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=3b82b1575f6a830f

## About the Role

* Associate's degree with Industry certification(s)
 * Five years of information security, cybersecurity, systems administration, network engineering, or related technology experience.
 * Two or more years of hands-on security engineering or security platform administration experience.
 * Experience supporting enterprise security technologies, Microsoft environments, cloud services, or hybrid infrastructure.
 * Experience participating in security incident response, vulnerability management, or security control implementation.

Preferred Experience

 * Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA)
 * Microsoft 365, Azure, Microsoft Entra ID, Intune, and the Microsoft Defender security ecosystem
 * CrowdStrike Falcon platform

 * Varonis Data Security Platform

## Description

The Security Engineer reports directly to the Chief Information Security Officer (CISO) and is responsible for the design, implementation, administration, and continuous improvement of enterprise cybersecurity technologies and controls. This role serves as a key technical contributor supporting security operations, endpoint protection, cloud security, identity management, vulnerability management, data protection, and regulatory compliance initiatives.
The Security Engineer works closely with Information Services, Infrastructure, Applications, Privacy, business stakeholders, end users, and external vendors to identify and reduce cybersecurity risk while supporting organizational objectives and regulatory requirements. The position requires a hands-on cybersecurity professional capable of balancing operational responsibilities with strategic security initiatives.
Duties and Responsibilities (other duties may be assigned):

Security Platform Administration

 * Administer, maintain, monitor, and optimize enterprise cybersecurity platforms, including CrowdStrike, Microsoft security technologies, Zscaler, Varonis, vulnerability management tools, and other approved security solutions.
 * Monitor platform health, investigate control failures, and ensure security technologies operate effectively and in accordance with approved standards.
 * Maintain security configurations, documentation, dashboards, reporting, and operational procedures.

Threat Protection and Incident Response

 * Investigate security alerts, suspicious activity, and potential cybersecurity incidents.
 * Support incident response activities, including identification, analysis, containment, eradication, recovery, documentation, and root cause analysis.
 * Develop and maintain detection logic, response procedures, and security playbooks.

Cloud, Identity, and Microsoft Security

 * Assist in securing Microsoft 365, Azure, Microsoft Entra ID, Intune, and hybrid technology environments.
 * Review cloud and identity configurations and recommend improvements that reduce risk and support Zero Trust principles.
 * Implement and maintain security baselines, identity protections, Conditional Access controls, privileged access safeguards, and configuration standards.

Vulnerability Management

 * Perform or support vulnerability assessments and coordinate remediation activities with technology owners.
 * Validate remediation, track risk reduction, and escalate aging or high-risk vulnerabilities as appropriate.

Data Protection and Governance

 * Assist with data classification, monitoring, access governance, and protection initiatives.
 * Support Varonis administration, alerting, reporting, investigation, and remediation activities.

Security Architecture and Projects

 * Participate in enterprise projects to ensure cybersecurity requirements are incorporated into solution design and implementation.
 * Develop and maintain security standards, technical procedures, diagrams, and other supporting documentation.

Compliance and Audit Support

 * Support internal and external audits, customer assessments, and regulatory examinations, including SOC 2 and HIPAA-related activities.
 * Assist with evidence collection, control validation, remediation tracking, and responses to audit requests.