Information Security Engineer

Overview Join a Company That Puts People First—and Wins Awards Doing It! At Aveanna, we’re proud to create a workplace where you feel valued, supported, and inspired. Here’s what sets us apart: Award-Winning Workplace Recognized for Best Leadership, Best Diversity, Best Company for Women, Best Career Growth, Work-Life Balance, Happiness, and Top-Rated Outlook in 2025. Proud partner of the Military Spouse Employment Partnership. Connection & Support Employee Connection Groups: Spaces to share experiences and build community. Social Circles: Connect over shared interests—books, music, movies, and more. At Aveanna, your well-being matters. That’s why on Wellness Wednesday's, we give you tools to recharge, reset and refocus. Inclusive Growth Open learning sessions for all employees—because we grow stronger together. Aveanna Cares – Service with Heart Every year, we embrace our Month of Service, giving you the chance to volunteer in your local community with your team. It’s a powerful way to give back, connect, and live our values beyond the workplace. Real Help When You Need It Most Through the Aveanna Employee Relief Fund, we stand by each other during life’s toughest moments—offering financial assistance to teammates facing unexpected hardships. Because here, care goes beyond the job description. Responsibilities & Qualifications JOB OVERVIEW The Information Security Engineer is responsible for the maturing of IT security programs to meet security requirements related to function, protection, assurance, risk management, and compliance. This individual will be responsible for documenting, testing and maturing a comprehensive information security program to protect all aspects of business and application assets across the organization. ESSENTIAL JOB FUNCTIONS Facilitate architecture, design, implementation, deployment, and operational discussions to ensure HIPAA and PCI compliant technology solutions. Validate current security standards against industry best practices and provide recommendations for improvements. Use vulnerability management tools to identify and prioritize risks across the enterprise. Research, evaluate, design, test, recommend and plan the implementation of new or updated information security technologies. Document and validate business procedures against published policies. Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems. Play an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned. Complete remediation activities and initiate actions to ensure that compliance and security gaps are successfully addressed. Research and assess new threats and security alerts and recommend remedial actions. Develop plans for security systems by evaluating network and security technologies; developing requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices Interface with the Project Management teams to ensure security services are met in all phases of the SDLC. Business continuity and disaster recovery validation against SLA definitions. Support compliance and financial audit requests. QUALIFICATIONS Required 3 to 5 years of experience in IT, with a minimum of one year in security architecture. Experience conducting disaster recovery, business continuity, incident response exercises. In-depth experience implementing security solutions. Knowledgeable in the design and implementation of security architectures that enable well integrated transactional, collaborative and analytical systems. In depth knowledge of information security regulations such as, FISMA, HIPAA, HITECH, PSQIA, Gramm-Leach-Bliley, SOX. In depth knowledge CIS, NIST, and ISO 27001 standards. Ability to perform vulnerability scans and provide remediation. Tenable Nessus experience a plus. Experience with EDR solutions. Experience with integrating, updating, and tuning a SIEM. In depth knowledge of Microsoft on prem and cloud environments including all security blades. Purview and Intune experience is a plus Experience with maintaining AV and endpoint encryption suite. Exceptional interpersonal skills, including teamwork, facilitation and negotiation. Must be able to work independently with minimal supervision. Ability to perform network forensics and resolve IDS alerts. Ability to rapidly comprehend the functions and capabilities of new technologies. Strong knowledge in Windows and Network administration. Ability to perform system hardening. Preferred Certifications: CISSP, OSCP, CISA preferred Known publications in the security field (blogs, recorded presentations, or news articles) Having writing organization policies from scratch Other Requirements Must be able to always adhere to confidentiality standards and professional boundaries. Attention to detail. Time Management. Ability to remain calm and professional in stressful situations Strong commitment to excellence. Effective problem-solving and conflict resolution. Excellent organization and communication skills. Quick-thinking and astute decision-making skills. Physical Requirements Must be able to travel Must be able to lift 50 pounds Prolonged walking, standing, bending, kneeling, reaching, twisting Must be able to sit and climb stairs Must have visual and hearing acuity Driving A valid driver's license and an acceptable Motor Vehicle Record (MVR) may be required. Age Must be 18 years or older Language Must be able to speak, write, read, and understand English. Work Environment Performs duties during agency operating hours in either an office, remote or hybrid work environment.Must be able to function in a wide variety of environments which may involve exposure to allergens and other various conditions. OTHER DUTIES Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. TOTAL REWARDS Comprehensive medical, dental, and vision coverage; a 401(k) matching program; and an Employee Stock Purchase Plan (ESPP)Career Path: Opportunities for advancemen Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. Aveanna does not accept unsolicited headhunter, and agency resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with Aveanna.