Information Security Engineers

4Consulting, Inc is seeking a qualified Information Security Engineers to support technology consulting, application development, systems analysis, testing, data management, cybersecurity, infrastructure, or project delivery services for client projects. The selected candidate will perform duties consistent with the client’s project requirements and company delivery standards., The candidate will be responsible for:

Design and maintain SaaS security posture management capabilities to continuously assess security controls, identify misconfigurations, and monitor enterprise SaaS and cloud environments for emerging risks.

Develop automated risk detection and exposure analytics using Python and AI/ML models to identify security weaknesses, prioritize remediation, and improve continuous control assessment.

Implement third-party risk monitoring processes to assess vendor security posture, track compliance gaps, evaluate exposure, and coordinate risk mitigation across enterprise technology environments.

Produce security governance reports, communicate risk findings to stakeholders, and support remediation planning, control effectiveness monitoring, and executive-level security decision-making.

Bachelor’s degree in Computer Science, Information Technology, Engineering, Business, or related field, or equivalent combination of education and experience.

Experience:

Experience in enterprise SaaS security posture management, cybersecurity engineering, third-party risk management, security automation, and continuous security control assessment. The source lists an Intermediate (3-5 years) skill level but does not specify a separate minimum experience requirement.

Technical Skills:

SaaS Security Posture Management (SSPM), Third-Party Risk Management (TPRM), Python, AI/ML, Security Analytics, Automated Risk Detection, Cloud Security, Misconfiguration Detection, Compliance Monitoring, Security Governance Reporting

Business / Domain Skills:

Experience supporting enterprise SaaS security programs, continuous security control assessments, cloud exposure monitoring, and compliance tracking across business applications and technology environments.

Experience evaluating third-party and vendor security risks, identifying control gaps, monitoring remediation activities, and supporting risk-based vendor governance.

Experience implementing security risk assessment processes, exposure analysis, and automated monitoring to strengthen enterprise security posture and reduce operational risk.

Experience translating security findings, compliance gaps, and vendor risk indicators into actionable remediation plans and executive governance reporting.

Communication:

Ability to communicate with technical and business stakeholders.

Documentation:

Ability to prepare project documentation, status updates, and deliverables.

Work Authorization:

Must be legally authorized to work in the United States. Sponsorship may be considered where permitted by company policy and project requirements., Experience designing or maintaining SSPM and TPRM capabilities, including continuous controls assessment, SaaS misconfiguration detection, and automated vendor risk monitoring.

Experience applying Python and AI/ML techniques to security analytics, risk prioritization, exposure detection, and security workflow automation.

Strong analytical, communication, and stakeholder management skills, with the ability to translate technical security findings into clear risk insights and governance recommendations., 4Consulting, Inc is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, citizenship status, immigration status where protected by law, or any other legally protected status. All candidates will be evaluated based on job-related qualifications, experience, skills, availability, and ability to perform the essential duties of the position.