[Hiring] Information Security Solutions Engineer II @Holman

Role Description

Holman is looking for a Security Engineer to work where cloud infrastructure and software development meet. You will review and design security architecture for our cloud environments, maintain our application security tooling, and work directly with development teams to threat model applications and find and fix vulnerabilities. You will also perform third-party vendor security reviews, support our work with external penetration testing partners, help secure our growing use of AI, and take part in incident response as part of the broader security team.

Qualifications

• 5–7 years of combined information security and technical engineering experience, with significant time in cloud security, application security, or both.
• Strong experience securing Microsoft Azure and Amazon AWS environments in cloud-native and hybrid architectures.
• Hands-on experience writing and maintaining infrastructure as code with Terraform (Terragrunt a plus), ARM, and/or Bicep.
• Ability to read and reason about application code in at least one of .NET, Python, Ruby, or Node.js.
• Strong working knowledge of OWASP Top 10, OWASP API Security Top 10, threat modeling methodologies (e.g., STRIDE), and secure software development practices.
• Working knowledge of cloud and application identity: Entra ID and AWS IAM, managed identities and service principals, RBAC and least privilege, and OAuth 2.0/OpenID Connect.
• Experience operating application and cloud security tooling, such as CNAPP/CSPM, application security testing, and API security.
• Experience with manual application testing tools such as Burp Suite or OWASP ZAP.
• Experience performing third-party vendor security assessments.
• Familiarity with edge, WAF, and CDN platforms such as Cloudflare, Akamai, Fastly, or Imperva.
• Working knowledge of Microsoft Windows and the Microsoft 365 suite, including Entra ID and Intune.
• Familiarity with security frameworks such as MITRE ATT&CK, NIST CSF, NIST 800-53, CIS Controls, and ISO 27001/27002.
• Strong scripting ability in Python or PowerShell.
• Clear communicator who can explain technical risk to developers, vendors, and management.

Requirements

• Participate in incident response activities, contributing cloud and application security expertise to investigation, containment, and remediation.
• Lead specific initiatives or workstreams when delegated.
• Share knowledge with peers and developers on secure design and coding practices.
• Stay current on cloud and application threats, attack techniques, and security technologies, and recommend improvements to Holman's security posture.
• Perform other duties and special projects as assigned.

Benefits

• Health Insurance
• Vision Insurance
• Dental Insurance
• Life and Disability Insurance
• Flexible Spending and Health Savings Accounts
• Employee Assistance Program
• 401(k) plan with Company Match
• Paid Time Off (PTO)
• Paid Holidays, Bereavement, and Jury Duty
• Paid Pregnancy/Parental leave
• Paid Military Leave
• Tuition Reimbursement