About this role
Job title: Information Security Engineer
About the Role
Netradyne's security program seeks a security-focused professional to help design, implement, and maintain robust information security measures across systems and processes. The role contributes to protecting sensitive information, ensuring data integrity, and maintaining regulatory compliance as part of DevSecOps and change management practices.
What You'll Do
- Implement and enforce authentication and authorization controls, including RBAC and least privilege
- Protect data through encryption in transit and at rest, and uphold data privacy practices
- Conduct risk assessments, security audits, and penetration testing to strengthen defenses
- Lead incident response planning, breach reporting, and regulatory notifications
- Maintain business continuity with data backups, disaster recovery planning, and data retention policies
- Oversee vendor due diligence, security risk assessments, NDAs, SLAs, and periodic third-party reviews
- Maintain comprehensive audit trails and logging, and monitor access to sensitive systems and data
- Develop, update, and enforce security policies, privacy procedures, and employee training programs
- Ensure secure onboarding, access control, and background verification for personnel; enforce physical security controls
What We're Looking For
- Experience building and maintaining information security programs with emphasis on access control, data protection, incident response, and risk management
- Familiarity with ISO 27001/27017/27018/27701 and HIPAA frameworks
- Knowledge of DevSecOps practices, secure software development life cycle, and change management
- Strong understanding of data privacy (PII/PHI), encryption technologies, and audit/logging practices
- Ability to perform risk assessments, internal/external audits, and penetration testing
- Effective communication and collaboration across technical and non-technical teams