Sr. Information Security Engineer in Pleasant Grove, Utah at Alianza, Inc.

Senior Information Security Engineer

This is a Utah HQ position-Hybrid in office and remote.

Alianza is on a mission to be the world's best cloud-based telecommunications platform for service providers. The Senior Information Security Engineer drives our security strategy forward and ensures our platform remains secure, compliant, and trusted by our customers.

As a Senior Information Security Engineer, you'll have a significant impact across our organization, leading security initiatives that protect our cloud infrastructure, customer data, and product ecosystem. You'll work autonomously to identify and resolve complex security challenges while mentoring others and championing security excellence throughout the company.

Core Responsibilities

Security Operations & Implementation

Develop, execute, and track the performance of security measures to protect information, network infrastructure, and computer systems Perform and document cybersecurity, vulnerability, and riskassessments and implement remediation plans Research security vulnerabilities and implement countermeasures Monitor cybersecurity trends and adapt security strategies accordinglyStrategy & Planning

Gather, analyze, and document security requirements for systems and applications Define and document security specifications for new and existing systems Recommend security solutions to managementDevelop cost-effective solutions to cybersecurity challengesGovernance & Compliance

Participate in sponsor auditsCreate comprehensive security reports and analysis for stakeholders

Training & Communication

Educate and train staffininformation security best practicesCommunicate security requirements and recommendations across the organizationRequired Qualifications

 

Experience

10+ years of experience in information security, with at least 2 years in senior or lead rolesProventrack recordof leading complex security initiatives in cloudand on premenvironmentsExperience securing SaaS platforms and multi-tenant architectureHands-on experience with security incident response and investigation Technical Skills

Deep understanding of cloud security (AWS/Azure/GCP) and cloud-nativearchitecture

Experience with securing on prem environmentsExpertisein application security, including secure SDLC, SAST/DAST, and code reviewStrong knowledge of network security, cryptography, and identity managementExperience with infrastructure as code and security automationProficiencyin at least one programmingor scriptinglanguage (Python,Bash,Java, etc.)Excellent understanding of technology infrastructures using Firewalls, VPN, Data Loss Prevention, and IDS/IPSDevelop, execute, and track the performance of security measures to protect information, network infrastructure, and computer systemsLeadership & Communication

Demonstrated ability to work independently on ambiguous problemsExperiencecollaborating across all aspects of the organization andleading technical initiativesExcellent written and verbal communication skills for technical and executive audiencesPreferred Qualifications

Certifications & Education

Certifications such as CISSP, GSEC, CCEP, CRCM, or CISM desiredSecurity certifications such as CISSP, SANS, or cloud-specific security credentialsDomain Expertise

Experience in telecommunications or VoIP security

Knowledge of compliance frameworksand standards(SOC2,NIST 800-53, ISO 27001, CIS Controls)Experience withpenetration testingBackground inDevSecOpsand CI/CD securityTechnical Expertise

Experience building security tools and automationKnowledge of zero-trust architecture principlesFamiliarity with security monitoring and SIEM platformsUnderstanding of API security and microservicesarchitecture