Information Technology Security Engineer

Summary

Ziply Fiber is a local internet service provider dedicated to elevating the connected lives of the communities it serves. The Information Technology Security Engineer protects company IT resources, property, and personnel by managing security infrastructure, compliance, vulnerability assessments, incident response, and AI-powered security operations. The role also develops security policies, integrates automation, and evaluates emerging AI-related threats and risks.

Responsibilities

• Maintains configurations for IT security technologies to optimize protective equipment functions and capabilities
• Collaborates with others in the Company (i.e., Information Technology engineers, Network Engineers, etc.) to perform design review and analysis of network infrastructure modifications
• Periodically reviews firewall and router rules and access control lists
• Responsible for PKI Infrastructure management and support - User and Server Authentication
• Develops, documents, and maintains methodology for sensitive and critical application and general support for IT security systems
• Draft policy based on NIST, FISMA, PCI, PII and CJIS compliance
• Ensures processes and procedures are developed, documented, maintained, and adhered to for incident identification, investigation and response, analysis and recommendations for risk management, collection of forensic data and regulatory requirements
• Develops policies, procedures and maintains scripts, routines, and software for accomplishing security studies and assessments to provide professional level analysis in recognizing system threats and vulnerabilities; leverages AI/ML-based detection tools to identify malware, anomalous behavior, and malicious activities at scale
• Monitors and reviews intrusion detection systems and firewall logs, utilizing AI-driven behavioral analytics and SIEM platforms to identify adverse patterns and coordinate mitigation responses
• Performs security assessments, risk identification and mitigation planning and execution
• Leads vulnerability management efforts and actively participates in patch management and risk management processes
• Participates in emergency operations, including the Computer Security Incident Response Team
• Deploys and manages AI-powered security tools including AI-driven SIEM, endpoint detection and response (EDR), and user and entity behavior analytics (UEBA) platforms to improve detection accuracy and reduce mean time to respond (MTTR)
• Evaluates emerging AI-driven attack vectors (e.g., adversarial AI, AI-generated phishing, deepfake social engineering) and develops countermeasures to protect company assets
• Research technical and IT security topics, including developments in AI/ML security tooling, generative AI risks, and emerging threat landscapes; maintains information on industry trends
• Assists with the development and implementation of the Cyber training and awareness program, incorporating AI-specific threat scenarios such as AI-generated phishing simulations and guidance on safe use of AI tools within the organization
• Integrates and manages AI-powered security automation workflows, including automated alert triage, threat hunting playbooks, and AI-assisted incident response runbooks to reduce analyst workload and response times
• Develops and enforces an AI Acceptable Use Policy, establishing security guardrails for employee use of generative AI tools (e.g., ChatGPT, GitHub Copilot) and ensuring data loss prevention controls are applied to AI interactions
• Collaborate with IT and business teams to perform AI risk assessments on proposed AI/ML solutions, evaluating model security, data privacy, and supply chain risks prior to deployment
• Performs other duties as required to support the business and evolving organization

Skills

• High school diploma or GED
• BS in Information Technology or equivalent technical discipline
• Three (3) to five (5) years of direct Cyber Engineer or information assurance experience
• Strong experience working with market standard Vulnerability Assessment tools and AI-powered security platforms (e.g., Darktrace, CrowdStrike Falcon, Microsoft Sentinel, or similar)
• Experience with network monitoring, network security, network equipment programming, firewall configurations and DLP solutions, log monitoring and event correlation
• Experience with policy and process documentation
• Understanding of DNS, DHCP and LDAP
• System hardening experience utilizing STIGs, CIS or USGCB
• Security Incident Response experience
• Strong oral and written communication abilities with experience writing policies
• Possess strong analytical and troubleshooting skills
• Able to serve as a technical resource to IT staff
• Practical experience using AI/ML-powered security tools or SOAR platforms for threat detection, automated response, or security analytics
• Familiarity with AI governance frameworks and the security risks associated with enterprise deployment of generative AI and large language model (LLM) applications
• Ability to work independently and apply sound judgment and reasoning skills to a variety of situations
• Ability to multi-task and collaborate effectively with other personnel to meet deadlines
• Strong verbal and written communication, attention to detail, and organizational skills
• Ability to work within critical deadlines
• Ability to adjust to rapidly changing priorities and schedules
• Ability to provide excellent customer service
• Applicants must be currently authorized to work in the US for any employer. Sponsorship is not available for this position
• Essential and marginal functions may require maintaining physical condition necessary for bending, stooping, sitting, walking, or standing for prolonged periods of time; most of time is spent sitting in a comfortable position with frequent opportunity to move about. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus
• CISM, CISA, CRIS, CISSP, Security+ or similar certification; AWS/Azure/GCP Security Specialty certification or AI/ML security training (e.g., GIAC GAIOPS, Google Professional ML Engineer, or vendor-specific AI security certifications) a plus

Qualifications

Must Haves

• High school diploma or GED
• BS in Information Technology or equivalent technical discipline
• Three (3) to five (5) years of direct Cyber Engineer or information assurance experience
• Strong experience working with market standard Vulnerability Assessment tools and AI-powered security platforms (e.g., Darktrace, CrowdStrike Falcon, Microsoft Sentinel, or similar)
• Experience with network monitoring, network security, network equipment programming, firewall configurations and DLP solutions, log monitoring and event correlation
• Experience with policy and process documentation
• Understanding of DNS, DHCP and LDAP
• System hardening experience utilizing STIGs, CIS or USGCB
• Security Incident Response experience
• Strong oral and written communication abilities with experience writing policies
• Possess strong analytical and troubleshooting skills
• Able to serve as a technical resource to IT staff
• Practical experience using AI/ML-powered security tools or SOAR platforms for threat detection, automated response, or security analytics
• Familiarity with AI governance frameworks and the security risks associated with enterprise deployment of generative AI and large language model (LLM) applications
• Ability to work independently and apply sound judgment and reasoning skills to a variety of situations
• Ability to multi-task and collaborate effectively with other personnel to meet deadlines
• Strong verbal and written communication, attention to detail, and organizational skills
• Ability to work within critical deadlines
• Ability to adjust to rapidly changing priorities and schedules
• Ability to provide excellent customer service
• Applicants must be currently authorized to work in the US for any employer. Sponsorship is not available for this position
• Essential and marginal functions may require maintaining physical condition necessary for bending, stooping, sitting, walking, or standing for prolonged periods of time; most of time is spent sitting in a comfortable position with frequent opportunity to move about. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus

Nice to Haves

• CISM, CISA, CRIS, CISSP, Security+ or similar certification; AWS/Azure/GCP Security Specialty certification or AI/ML security training (e.g., GIAC GAIOPS, Google Professional ML Engineer, or vendor-specific AI security certifications) a plus