Are you an experienced information security professional who wants to help drive the direction of an organization on multiple fronts? At Kinsale Insurance, the Information Security Engineer will be an experienced member of the information security team responsible for implementing and supporting key initiatives as Kinsale builds out its next generation of cloud architecture and systems. The Information Security Engineer will develop, monitor, and help direct the security posture of Kinsale Insurance. Join our team onsite collaborating and researching new technologies and business processes and coordinate resolution of security issues.

Responsibilities:

• Lead and conduct targeted security risk assessments of cloud-based, network, system, and application technologies against industry (e.g., NIST, CIS, and CSA) and vendor specific (e.g., AWS, Azure) best practices
• Evaluate existing and identified security control gaps, and provide written risk-based recommendations to enhance security controls
• Work with technical teams to implement security best practices and develop supporting processes to enhance security controls
• Develop system security baseline configurations, in conjunction with subject matter experts, and develop processes to measure and maintain compliance
• Create and monitor operational metrics and reports for on-premises and cloud-based security technology for security issues and drive remediation as needed
• Integrate external threat intelligence into security processes
• Investigate security events and serve as a part of security incident response team
• Collaborate within IT to ensure compliance with published security policies and standards
• Provide input into company-wide security policies and procedures to be up to date with the latest industry best practices and security standards
• Serve as the backup for other security operations staff
• Stay current on IT security trends and news

QUALIFICATIONS:

• Demonstrated experience securing resources in an AWS environment
• Experience with the DevSecOps process and code analysis in the CI/CD pipeline
• Experience using security tools such as: MDR (managed detection and response), Nessus, software composition analysis, asset inventory, Wireshark, NMAP, ZAP, and powerfuzzer or equivalent
• Experience building and aligning a security program to a security framework such as NIST-CSF, NIST 800-53, or CIS Critical Security Controls
• Experience with common security related technologies such as privileged access management, IDS/IPS, malware prevention, user activity monitoring, MFA, SSO, SIEM, email protection, MS Active Directory and Group Policy, web content filtering, log collection and management, and PKI management
• Strong background in scripting, coding, and task automation, preferably with PowerShell or Python
• Demonstrated experience with networking fundamentals, such as TCP/IP, DNS, HTTP/S, SMTP, SNMP, etc.
• Able to appropriately communicate complex technical information to all levels of the enterprise
• 5+ years of experience within an enterprise security environment
• Be highly self-motivated and have an attention to detail
• Bachelor’s degree in computer science, technology, or related field preferred
• Relevant security certifications such as AWS Certified Security, Global Information Assurance Certification (GCIH, GCFA, GREM, etc.), Offensive Security Certified Professional, (ISC)2 SCCP, Certified Ethical Hacker (CEH), or (ISC)2 CISSP preferred

At Kinsale we offer the following great benefits:

• Competitive salary with performance-based bonus opportunities
• Single and Family Health, Dental and Vision Insurance plans with HSA funds contributed
• Short-Term and Long-Term disability
• Life Insurance
• Matching 401(k) starting day one
• Generous Paid Time Off and Holidays
• Education dollars for training and certifications