Information Security Engineer

Own cybersecurity control assessment and implementation across Peoples Bank’s technology environment as an on-site security engineer in Marietta, OH.

Responsibilities

• Lead assessments across endpoint security, remote access solutions, Microsoft security capabilities, identity and access management processes, logging capabilities, and other priority technology areas
• Collect and document current-state configurations, workflows, ownership, dependencies, and control gaps
• Drive the technical direction and continuous improvement of vulnerability management, including prioritization, complex remediation decisions, compensating controls, and escalation of unresolved risk
• Identify opportunities to strengthen security controls while balancing operational requirements
• Create recommendations and implementation roadmaps
• Participate in technology projects to define security requirements for identity, endpoint protection, logging and monitoring, data protection, vendor access, and system administration
• Lead or coordinate technology evaluations, pilots, proof-of-concepts, and implementation activities
• Coordinate technical discussions among Information Security, IT, application teams, vendors, and managed service providers
• Track project findings, recommendations, action items, risks, dependencies, and remediation progress through completion
• Develop and maintain process documentation, technical standards, diagrams, inventories, and support materials
• Document current-state architectures, workflows, technology dependencies, and security control implementations to support assessments and modernization efforts
• Maintain inventories of security technologies and capabilities
• Coordinate development and refinement of security procedures and operating practices
• Partner with security operations personnel to understand operational challenges and ensure security improvement initiatives match operational needs
• Support audits, examinations, and regulatory requests as assigned
• Serve as a security representative for technology initiatives and projects
• Work closely with Information Security, IT, business teams, vendors, and managed service providers
• Communicate project status, risks, recommendations, and findings to stakeholders
• Promote cybersecurity awareness and adoption of security best practices across the organization

Requirements

• Bachelor’s degree or equivalent work experience
• 5+ years of experience in cybersecurity, systems administration, engineering, infrastructure, identity management, or related technology disciplines
• Proven ability to lead technology assessments, implementations, or operational improvement initiatives
• Strong understanding of Microsoft 365, Active Directory, Entra ID, endpoint security, vulnerability management, and access management concepts
• Experience evaluating technology risks and recommending practical security improvements
• Experience coordinating technical activities across security, infrastructure, application, and vendor teams
• Ability to translate technical concepts into business-focused recommendations and action plans
• Strong communication, facilitation, and organizational skills
• Ability to independently drive complex initiatives from assessment through implementation
• Experience leading security technology implementations
• Experience designing or improving identity, endpoint security, remote access, or security monitoring capabilities
• Experience developing roadmaps, implementation plans, and operational procedures
• Experience mentoring technical staff and serving as a technical lead
• Experience presenting recommendations to technical and business stakeholders
• Familiarity with CRI, NIST CSF, CIS Controls, or other security frameworks
• Experience with Microsoft security technologies including Defender, Entra ID, Conditional Access, Sentinel, or related platforms
• Basic scripting and automation experience
• Team player
• Valid driver’s license; some travel required

Technologies

• Microsoft 365
• Active Directory
• Entra ID
• Endpoint security
• Vulnerability management
• Identity and access management
• Logging capabilities
• Defender
• Conditional Access
• Sentinel
• CRI
• NIST CSF
• CIS Controls

Benefits

• 401(k) retirement plan with employer match
• Employee stock purchase plan
• Education assistance programs including student loan and tuition paydown/reimbursement
• Paid vacation
• Holidays