Information Security Manager leading security operations for Protolabs' digital infrastructure. Overseeing compliance and risk management in a hybrid role based in Maple Plain, MN.
About the role
- Senior Cybersecurity Engineer at MSIG – North America, designing and implementing cybersecurity solutions. Managing security infrastructure and collaborating with the Information Security Officer.
Responsibilities
- Support the Information Security Officer in designing, developing, and implementing cybersecurity and IT security solutions for MSIG – North America
- Manage Azure NSG, WAF, VPN devices, load balancers, firewalls, and other security infrastructure
- Identify, assess, and mitigate risks to ensure data and system security and integrity
- Manage and maintain the vulnerability and patch management program
- Ensure compliance with regulatory requirements and industry standards, including PCI, NYDFS, and NIST
- Collaborate with the Information Security Officer to develop and implement robust security architectures and designs to protect against cyber threats
- Lead and execute cybersecurity projects from conception to completion, ensuring effective security measures are deployed
- Monitor and manage IPS/IDS managed services, both internal and outsourced
- Maintain and update a comprehensive information security program that includes policies and processes to minimize risk and ensure data integrity and availability
- Evaluate and implement tiered defensive posturing systems and policies to defend against malware threats
- Create and maintain information security policies, standards, controls, and procedures to comply with evolving laws and regulations
- Use a risk-based approach to secure applications, databases, or infrastructure based on technology and business needs
- Manage testing and vulnerability analysis, including third-party scanning, pen testing, and network security providers
- Oversee the Identity and Access Management Platform – OKTA and Azure AD.
- Administer Illumio and Zscaler for micro-segmentation and zero trust security models to reduce attack surfaces and limit lateral movement within the network
- Conduct phishing simulation training programs to educate employees on identifying and avoiding phishing attacks
- Resolve security-related cases escalated by Level 1 Helpdesk
- Handle proxy issues requiring manufacturer intervention for final resolution
- Maintain documentation and continuously improve existing infrastructure, network/security, and audit standards
- Manage and maintain technologies such as antivirus, encryption systems, firewalls, access, and authentication technologies
- Manage off-shore support resources and vendors supporting email and security applications.
Requirements
- Bachelor's degree in computer science or a related field
- 5 to 7 years of technical experience in a security environment
- Over 3 years of experience with Security Information and Event Management (SIEM) tuning and reporting
- 5 to 7 years of experience in managing security for users, platforms, and devices, including authentication, access controls, authorization, and integration of enterprise directories with other systems in large, complex environments
- Proficiency with enterprise-class security products such as Identity Access Management, Web Access Management, and Single Sign-On
- Strong knowledge of common security frameworks and regulations, with substantial experience in cloud environments
- Expertise in security-related topics, including authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, the principle of least privilege, software attack methods, secure data transfer/storage, etc.
- Excellent verbal and written communication skills, with the ability to convey information clearly to team members, stakeholders, and senior managers
- Deep understanding of protocols such as TCP/IP, HTTP, and TLS/SSL at OSI network layers
- Experience with security tools and creating detailed documentation
- Experience managing vendor relationships with security and technology manufacturers, consultants, or VARs, including negotiating contracts and coordinating activities related to hardware, software, telecommunications, support, and training vendors.
- CompTIA Security+ - Required
- CISA - Required
- Proficiency with Microsoft Office Suite, MS Project
Benefits
- Healthcare and Retirement Benefits
- Comprehensive medical, dental, and vision coverage
- 401(k) with a generous employer match and profit-sharing contribution
- Wellness incentive program
- Life and accidental death and dismemberment (AD&D) insurance
- Flexible spending programs
- Short-term and long-term disability plans
- Additional Benefit Programs
- Paid time off program
- Paid charitable leave
- Paid parental leave
- Tuition reimbursement program
- Personal insurance (auto/homeowners) discounts
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Product Manager focusing on securing product experiences while balancing user needs and compliance. Leading initiatives across agile teams to deliver exceptional customer journeys with robust security standards.
Working Student supporting Tech Security Team in Hamburg. Assisting with IT security incidents and evaluating security - related events in Google Chronicle.
Cyber Security Architect developing high - quality Cyber and IT security solutions for Webster Bank. Focused on formulating, designing, assessing security systems, and ensuring compliance across technology initiatives.
Leading technical excellence and innovation as Head of Data Protection for Barclays, ensuring robust data security and operational efficiency. Mentoring engineering teams and aligning strategy with business goals.
Security Risk Analyst focusing on Enterprise Security Risk Management for Xcel Energy. Collaborating on risk assessments and ensuring documentation aligns with industry standards.
IA
Conseiller juridique stratégique au sein des Services juridiques pour la protection des renseignements personnels au Canada. Fournissant des conseils stratégiques en matière de cybersécurité et réglementaire.
Cyber Security Manager leading the safeguarding of technology assets and data against threats at Barnet Council. Driving strategies, compliance, and risk management aligned with national standards.
Senior Cloud Security Engineer designing, implementing, and operating security capabilities for cloud environments with Lennar, a leading homebuilder.
Solution Train Engineer facilitating Information Security Agile Release Train processes for delivering solutions. Coaching teams while overseeing Program Increment sessions and managing risks and delivery flow.