The Wounded Warrior Project (WWP) Information Security Engineer acts as a security subject matter expert, focused on designing, implementing, and maintaining controls that protect WWP’s systems, identities, applications, cloud services, and information assets. This role works closely with business and technology teams to strengthen cybersecurity capabilities across identity and access management, data protection, cloud and application security, security operations, and emerging technology governance.

Role Responsibilities

Develop, implement, and maintain security strategies, platforms, and the organization’s overall security architecture.
Design, implement, administer, and continuously improve enterprise security technologies and controls.
Serve as a subject matter expert for the organization and third-party vendors.
Design and administer identity and access management controls, including authentication, authorization, access governance, and privileged access management processes.
Support security architecture reviews and risk assessments for cloud platforms, software-as-a-service (SaaS) solutions, and third-party technologies.
Partner with application owners and technology teams to integrate security requirements into software acquisition, development, and implementation processes.
Configure and monitor security information and event management (SIEM) platforms.
Perform vulnerability scans, risk analyses, and security assessments, and lead remediation efforts.
Evaluate emerging technologies, including artificial intelligence and automation platforms, and help establish security controls and governance practices.
Support information protection, data classification, data retention, and security governance initiatives.
Define, measure, and report security metrics and performance indicators.
Provide technical guidance and mentorship to security analysts and other IT teammates.
Conduct research and remain current on emerging security threats, trends, vulnerabilities, and best practices.
Participate in incident response, threat investigations, and remediation activities in partnership with security operations personnel to improve detection and response capabilities.
Evaluate new technologies and processes that enhance security capabilities and operational effectiveness.
Design and maintain controls supporting data protection, information governance, encryption, and secure data-handling practices.
Analyze existing security controls and recommend improvements to strengthen WWP’s security posture.
Participate in the evaluation, selection, and implementation of technology solutions.
Prepare and maintain security documentation, including policies, procedures, standards, and training materials.
Attend and actively participate in required training and/or meetings, including New Teammate Orientation, WWP Cares, ASIST Suicide Prevention training, Leadership training, culture/team based training, or departmental huddles.
Other related duties as assigned.

Required Qualifications

Five years of experience working in information security.
Three years of experience designing, implementing, or administering enterprise security technologies and controls.
Experience with identity and access management, security architecture, data protection, cloud security, application security, or related security disciplines.
Experience performing security assessments, risk analyses, vulnerability management, and security control implementation.
Experience partnering with technical and business stakeholders to implement security improvements and best practices.
Bachelor’s degree in computer science, information systems, or related field (or equivalent combination of applicable education, training, certification, and experience in lieu of degree).

Technology Exposure

SIEM
Authentication
Authorization
Privileged access management
Encryption
Artificial intelligence
Automation platforms
Cloud platforms
Software-as-a-service (SaaS)
Security information and event management (SIEM) platforms

Benefits

Flexible hybrid work schedule (three days in the office, two days’ work from home)
Full medical, dental, and vision coverage for both teammates and family members
Competitive pay and performance incentives
A fun, mission-focused, and collaborative team environment

Knowledge, Skills, & Abilities

Strong knowledge of identity management, access controls, permissions, privileges, encryption, web security, intrusion prevention, and data loss prevention technologies.
Knowledge of identity and access management principles, cloud security concepts and architectures, application security practices, and security governance, risk management, and compliance concepts.
Understanding of data protection and data lifecycle management concepts.
Ability to evaluate security implications of emerging technologies, including artificial intelligence and automation solutions.
Proven ability to collaborate with teammates, business partners, vendors, and stakeholders to resolve security-related issues.
Skill in developing clear technical documentation and security training materials.
Strong analytical, diagnostic, and problem-solving skills for complex security issues.
Strong configuration, implementation, and solution-design skills.
Self-motivated with the ability to take initiative and drive projects to completion in a project-based environment.
Excellent organizational and time-management skills, including managing multiple priorities in a fast-paced environment.
Ability to maintain confidentiality and use sound judgment with sensitive information.
Excellent verbal and written communication skills across diverse audiences.
Ability to influence others and build consensus without direct authority.
Independent thinker with strong critical thinking and analytical capabilities.
Team-oriented approach with a desire to collaborate in day-to-day activities.
Commitment to fostering a positive work environment and supporting team and organizational success.
Unequivocal commitment to the highest standards of personal and business ethics and conduct.
Mission-driven and aligned with core values.

Work Location & Logistics

Jacksonville, FL (hybrid)
General office environment; temperature controlled
Sitting for extended periods
Up to 25% travel

Preferred Experience

Experience supporting cloud-first environments
Experience supporting Microsoft-based security ecosystems or comparable enterprise security platforms
Experience with identity governance, data protection, security operations, or security monitoring technologies
Experience supporting security governance or compliance initiatives

Certifications (Preferred)

CISSP
CISM
Security+
SC-100
SC-200
SC-300
SC-500

Information Security Engineer

Job Description