Information Security Engineer

You will own ALKU's day-to-day cybersecurity operations and long-term security strategy, serving as the primary internal liaison to our Managed Security Service Provider (MSSP) and our Managed Service Provider (MSP). You bring deep security engineering experience, a strong networking foundation, and the ability to communicate risk clearly to leadership.

- Drive and maintain ALKU's cybersecurity roadmap and controls, aligning initiatives with business risk and priorities

- Establish and communicate security policies, standards, and procedures across the organization

- Report on security posture and program maturity to senior leadership

- Help drive risk assessments, remediation planning, and evaluate security investments and vendors

- Serve as ALKU's primary point of contact with MSSP and MSP managing alert tuning, detection coverage, response playbooks, and regular business reviews

- Ensure SLAs and security commitments from both partners are met

- Oversee detection, triage, escalation, and response to security incidents

- Partner with MSP to maintain ALKU's incident response plan, tabletop exercise program, and post-incident review process

- Provide on-call escalation support during high-severity incidents; occasional after-hours availability required

- Analyze security data, alerts, and logs to identify risks and trends; maintain up-to-date awareness of the evolving threat landscape

- Work with MSP and MSSP to tune Automatic Response Plays, SIEM and EDR tooling to reduce noise and improve detection

- General understanding of networking expertise to assess and improve ALKU's security architecture (firewalls, VPN, network segmentation, DNS security, and Zero Trust initiatives)

- Review and advise on network changes, cloud connectivity, remote access design, and firewall rule sets in partnership with the MSP

- Work with MSP to oversee Microsoft 365 and Entra ID (Azure AD) security configuration, Conditional Access, and MFA enforcement

- Assess and advise on cloud security posture across Azure, SaaS platforms, and custom applications at ALKU

- Lead the security awareness training program including phishing simulations and role-based education

- Maintain accurate security incident records, documentation, and audit-ready evidence libraries

- Prepare regular security reports for internal stakeholders

- 7+ years of progressive information security experience, with 2-3+ years in a senior or lead role

- Networking knowledge: IP, routing/switching, firewall architecture, VPN, VLANs, DNS, IDS/IPS - a background in network engineering or network security is a strong differentiator

- Hands-on experience with SIEM platforms, EDR tools, and threat detection/response workflows; familiarity with MDR/MSSP platforms preferred

- Experience managing or overseeing MSSPs and/or MSPs in an enterprise or mid-market environment

- Strong command of the Microsoft 365 security stack: Defender suite, Entra ID, Conditional Access

- Ability to develop security strategy and communicate risk clearly to non-technical leadership

- Bachelor's degree in Computer Science, Information Security, Information Technology, or related field preferred; equivalent experience considered

- CISSP, CISM, CCNP Security, CompTIA CASP+, or equivalent certification

- Experience with SASE, SD-WAN, or Zero Trust network architecture

- Familiarity with Microsoft Sentinel, Defender compliance tooling

- Clear career progression and opportunities for internal advancement

- Student Loan Reimbursement after one year as a full-time employee

- Prolonged periods of sitting at a desk and working on a computer