Note: The job is a remote job and is open to candidates in USA. Gotham Technology Group is seeking an Information Security Engineer to manage and support its full suite of security products. The role leads incident investigations, security assessments, audits, vulnerability scanning, security reporting, vendor collaboration, architecture reviews, and evaluation of emerging security technologies.

Responsibilities

• Manage core security infrastructure: IDS/IPS, firewalls, antivirus, web filtering, DLP, NAC, DDoS protection, third-party remote access, application whitelisting, and EDR solutions
• Own SIEM operations and privileged account management systems
• Investigate and resolve security events end-to-end
• Conduct security audits, risk assessments, and firewall/network/system configuration reviews
• Run vulnerability scans across networks, servers, systems, and applications
• Produce weekly security metrics reports
• Partner with consultants, MSSP/SOC vendors, and third-party providers on security services
• Contribute security architecture input to project reviews
• Evaluate and test emerging security technologies

Skills

• • Deep knowledge of security best practices across systems, networks, and telecommunications
• • Strong analytical, troubleshooting, and root-cause investigation skills
• • Excellent communication, documentation (SOPs, guidelines, architecture diagrams), and project-planning abilities
• • Comfortable balancing security with business needs; works well independently and in teams
• • Able to manage multiple projects in a fast-paced environment
• • Available for on-call rotation, off-hour emergency calls, and occasional travel
• • Network/Firewall: Cisco devices; Palo Alto (advanced); micro-segmentation (Illumio or similar)
• • SIEM/IDS/IPS: Microsoft Sentinel; Vectra AI, Snort, Suricata, AlienVault, or similar
• • Endpoint Security: CB Application Control, ThreatLocker, Microsoft Defender for Endpoint
• • Vulnerability & Pen Testing: Nessus, Tenable, Rapid7 Nexpose, Cobalt Strike, Qualys
• • Offensive/Open-Source Tools: Kali Linux, Metasploit, Nmap, PowerShell Empire, Kerberoast, TrustedSec SET
• • Systems: Windows (AD, DNS, DHCP, SQL), Linux (Ubuntu, CentOS, RedHat), server/workstation hardening
• • Scripting: Python, PowerShell, VB
• • PAM: CyberArk, BeyondTrust, or similar
• • Microsoft Cloud Security: M365 E5 security stack, Azure, Entra ID, Defender, Sentinel, Azure networking & governance

Company Overview