> Markdown version of [/jobs/ext/4518451-information-security-engineers](https://www.wearedevelopers.com/jobs/ext/4518451-information-security-engineers). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Engineers

- **Company:** 4Consulting, Inc.
- **Location:** Yonkers, NY, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Information Technology Consulting, Continuous Integration, Systems Analysis, Python (Programming Language), Network Segmentation, Cloud Services, Software Engineering, Software Vulnerability Management, Data Logging, Scripting, Google Cloud, Enterprise Software Applications, Cloud Platform System, Mitre Att&ck, Cloudformation, Infrastructure Automation Frameworks, Information Technology, Data Management, Terraform
- **Published:** October 31, 2026
- **Apply:** https://www.dice.com/job-detail/f3aa0b5b-a5fb-4888-b0ee-15b640f46cd3

## About the Role

Bachelor's degree in Computer Science, Information Technology, Engineering, Business, or related field, or equivalent combination of education and experience.

Experience:

Minimum 6 years of IT experience, including at least 4 years in cybersecurity or information security roles supporting on-premises and cloud environments.

Technical Skills:

Cloud Security, Threat Modeling, STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, Python, Terraform, AWS CloudFormation, CI/CD Security

Business / Domain Skills:

Experience supporting enterprise cybersecurity and information security programs across cloud and on-premises environments, including security risk assessment and threat mitigation.

Experience evaluating security requirements, authentication and authorization controls, encryption, logging and monitoring, infrastructure protection, and network segmentation.

Experience integrating threat modeling and security architecture reviews into application development, infrastructure provisioning, and software delivery processes.

Experience supporting secure technology governance, vulnerability remediation, architecture reviews, and collaboration between security, cloud engineering, and application development teams.

Communication:

Ability to communicate with technical and business stakeholders.

Documentation:

Ability to prepare project documentation, status updates, and deliverables.

Work Authorization:

Must be legally authorized to work in the United States. Sponsorship may be considered where permitted by company policy and project requirements.

Certification Required

Cloud Certification: Associate or professional level in AWS or Google Cloud Platform - required.

Cybersecurity Certification: Associate or professional level - required., Demonstrated expertise in threat modeling methodologies, security architecture reviews, and identifying risks across enterprise applications, infrastructure, and cloud services.

Hands-on experience with Python scripting, Terraform or CloudFormation, and reviewing software development lifecycle processes and CI/CD pipelines for security weaknesses.

An associate-level or professional-level cloud certification in AWS or Google Cloud Platform and an associate-level or professional-level cybersecurity certification are required., 4Consulting, Inc is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, citizenship status, immigration status where protected by law, or any other legally protected status. All candidates will be evaluated based on job-related qualifications, experience, skills, availability, and ability to perform the essential duties of the position.

## Description

4Consulting, Inc is seeking a qualified Information Security Engineers to support technology consulting, application development, systems analysis, testing, data management, cybersecurity, infrastructure, or project delivery services for client projects. The selected candidate will perform duties consistent with the client's project requirements and company delivery standards., The candidate will be responsible for:

Conduct threat modeling and security assessments using methodologies such as STRIDE, PASTA, MITRE ATT&CK, or MITRE ATLAS to identify threats, evaluate risks, and recommend appropriate mitigations.

Design and review technical architectures, applying security controls for authentication, authorization, encryption, logging, monitoring, infrastructure protection, and network segmentation across cloud and on-premises environments.

Develop and analyze Python scripts and Infrastructure as Code configurations using Terraform and/or CloudFormation to support secure infrastructure provisioning, automation, and configuration reviews.

Assess security practices throughout the software development lifecycle, review CI/CD pipelines, identify vulnerabilities, and collaborate with engineering and security teams to strengthen architecture, implementation, and operational security.