The Information Security Engineer is responsible for researching, analyzing, auditing, and protecting software applications developed by the Software Engineers to ensure compliance with laws and regulations, and the ISO 27001 Information Security Management and ISO 22301 Business Continuity Planning standards, practices, policies, and procedures.

1. Key Responsibilities
- Identify security vulnerabilities in programs and applications
- Create custom integration software for applications monitoring
- Coordinate with Software Engineers and Data Warehouse and Business Intelligence (DWBI) Architects on all matters related to data security
- Validate all code developed by Software Engineers to ensure its compliance with the information security requirements
- Acquire and develop tools for conducting data analyses on collected data sets, including review of computer logs and messages, to identify and report potential security related issues, or violations of security
- Conduct vulnerability and penetration testing of applications
- Conduct security code review and provide feedback on improvements to the code, and document/report the findings

2. Minimum Requirements and Critical Skills
- 5+ years of experience in in software development, with at least four years system level programming experience in C, C++, C#, or higher-level programming language
- Knowledge of software engineering tools for conducting data analysis on collected data sets, including reviews of computer logs and messages, to identify and report any possible security related issues, or violations of security

3. Additional Knowledge & Skills
- Knowledge and experience in document control
- Certified Ethical Hacker (CEH) or Certified Information Systems Security Professional (CISSP)
- Fluent in English

4. Education
- B.S. or M.S. in Computer Science, Engineering, Mathematics, Physics or related field or equivalent experience