Information Security Engineer - Nomadic

Job Description

Fragomen, the leading global immigration services provider and an AmLaw 100 Firm, is seeking an experienced Information Security Engineer to embed within our Nomadic organization.

This role offers the unique chance to support one of Fragomen's exciting subsidiaries, which is a key component of our technological offerings. The Senior Security Engineer will help to guide our development and infrastructure teams in implementing the controls, policies, and processes in Fragomen's information security management system. This will involve strengthening, maintaining, and extending the security controls and processes we have in our organization, product, and software development lifecycle. Your work will greatly impact the value and trust we can deliver to our customers and partners.

The Information Security Engineer at Fragomen - Nomadic will:

• Maintain and continually improve Fragomen's Information Security Management System in coordination with our partners within Nomadic and the rest of the organization
• Coordinate on compliance and certification initiatives for various standards and regulations (PCI, ISO27001, SOC2, etc. and GDPR, CCPA, etc.)
• Coordinate with Nomadic Product, HR, Legal, Marketing, IT, and Customer Support teams to empower them to maintain Fragomen's security standards
• Assist in maintaining Fragomen's risk management program
• Assist in maintaining security of current network and product infrastructure
• Assist DevSecOps in maintaining our deployed application environments
• Assist in maintaining our secure SDLC
• Assist with third-party penetration testing and audits
• Work with Nomadic to ensure security monitoring and logging systems are effective and functional to Fragomen's standards.
• Ensure technical security compliance across Nomadic
• Staying on top of security related industry news and topics
• Promote a security focused mindset
• Help conduct security awareness trainings

Let's talk if you have the following qualifications and experience:

• 4+ years of relevant work experience
• Strong understanding and experience with web application security concepts
• Experience identifying and protecting web applications
• Familiarity with Azure/AWS or similar cloud platforms
• Familiarity with Linux, Docker, a major programming language (Python, Java, Ruby, C++, Rust, Javascript, etc.), networking, and web applications in general
• Knowledge and understanding of risk models
• Knowledge of common industry certifications/standards/compliance (SOC I/II, ISO 27001, GDPR, etc.)
• Industry certifications (CISSP, CCSP, CISA, etc.)
• AWS/Azure experience and/or certifications
• Experience with backend or frontend web frameworks (Django, Ruby on Rails, Angular, Ember, React, etc)

Fragomen is committed to promoting diversity, inclusion and equal opportunity for all employees and applicants, regardless of race, ethnicity, heritage, gender, age, religion, disability, sexual orientation, gender identity or intersex status.