Sr Information Security Specialist

At HNTB, you can create a career that is meaningful to you while building communities that matter to all of us. For more than a century, we have been delivering solutions for some of the largest, most complex infrastructure projects across the country. With our historic growth, it is an exciting time to join our team of employee-owners.

This opportunity entails serving as a senior individual contributor responsible for leading the operational execution of complex information security activities that protect HNTB systems, applications, networks, and information. The position serves as a senior technical resource and escalation point for security incidents, technology implementations, control deficiencies, and other complex security matters. Working within established information security priorities and standards, the position coordinates cross-functional technical efforts, improves operational processes, and helps ensure assigned security capabilities are implemented and operating effectively.

What You’ll Do:

• Leads investigation and operational response to complex security incidents, including evidence analysis, containment coordination, remediation tracking, case documentation, and escalation to Information Security management.
• Serves as a senior technical escalation point for security events, vulnerabilities, configuration concerns, control deficiencies, and operational issues that cannot be resolved through standard procedures.
• Leads the technical implementation, configuration, integration, testing, and operational transition of security technologies and controls within approved project scope and organizational direction.
• Coordinates complex remediation activities across infrastructure, applications, cloud services, identity platforms, data environments, vendors, and other technology teams.
• Provides senior operational oversight for assigned security capabilities, including procedures, technical configurations, control execution, metrics, issue management, and continuous improvement.
• Manages security workstreams and technical projects by coordinating activities, dependencies, testing, risks, documentation, communications, and implementation readiness.
• Conducts advanced security assessments of technologies, applications, architectures, configurations, and processes; documents findings and recommends practical remediation options to Information Security management and technology owners.
• Develops and improves operational procedures, playbooks, technical standards, automation, monitoring, reporting, and quality-control practices for assigned security activities.
• Performs other duties as assigned., * Maintains advanced technical knowledge across multiple information security domains and deep expertise in one or more assigned areas.
• Applies security policies, standards, architecture requirements, and management direction to implementations and operational decisions.
• Independently analyzes and resolves complex technical, operational, and control-related security issues.
• Communicates complex security matters clearly and provides technical guidance and mentorship as a senior individual contributor.
• Evaluates practical options for meeting security objectives, communicates technical and operational trade-offs, and escalates barriers requiring management decisions.

• Associate’s Degree in Computer Science or related degree and 8 years of relevant experience, or
• In lieu of education, 10 years of relevant experience; information security, information technology operations, * CEH, CISM, CISSP, GSEC, CompTIA Security+ certifications or licenses preferred
• Experience conducting security risk assessments, documenting findings, and recommending practical remediation options.
• Experience with security policy and standards creation, interpretation and maintenance.

• Demonstrated knowledge of applying system security principles, policies and regulations.

• Experience implementing, configuring, integrating, and operating enterprise security solutions.
• Experience with one or more of the following solutions: SASE, DSPM, DLP and/or PAM.