IT Security Engineer

This is a remote position. Position Title: IT Security Engineer Base Salary: $97,900 to $153,800 annually DOE Benefits: Medical, dental, vision, 401k, flexible spending account, paid sick leave and paid time off, parental leave, quarterly performance bonus, training, career growth and education reimbursement programs. Meridian Softworks is a local internet service provider dedicated to elevating the connected lives of the communities we serve. We offer the fastest home internet in the nation, a refreshingly great customer experience, and affordable plans that put customers in charge. As our state-of-the-art fiber network expands, so does our need for team members who can help us grow and realize our goals. Our Company Values: Genuinely Caring: We treat customers and colleagues like neighbors, with empathy and full attention. Empowering You: We help customers choose what is best for them, and we support employees in implementing new ideas and solutions. Innovation and Improvement: We constantly seek ways to improve how we serve customers and each other. Earning Your Trust: We build trust through clear, honest, human communication. Job Summary The IT Security Engineer applies Information Technology (IT) security principles, methods, and security products, including AI-powered security tools and automation, to protect and maintain the availability, integrity, confidentiality, and accountability of company IT resources, as well as the physical security and access of property and personnel. This role leverages AI and machine learning technologies to enhance threat detection, accelerate incident response, and strengthen the organization’s overall security posture. The position is responsible for executing assigned tasks to support and implement the goals of the company’s Information Security initiatives on time and within the approved budget. Essential Duties and Responsibilities: The Essential Duties and Responsibilities listed below are a range of duties performed by the employee and not intended to reflect all duties performed. IT Security Configuration & Infrastructure ·Maintains configurations for IT security technologies to optimize protective equipment functions and capabilities. ·Collaborates with others in the Company (i.e., Information Technology engineers, Network Engineers, etc.) to perform design review and analysis of network infrastructure modifications. ·Periodically reviews firewall and router rules and access control lists. ·Responsible for PKI Infrastructure management and support - User and Server Authentication. Policy, Compliance & Documentation ·Develops, documents, and maintains methodology for sensitive and critical application and general support for IT security systems. ·Draft policy based on NIST, FISMA, PCI, PII and CJIS compliance. ·Ensures processes and procedures are developed, documented, maintained, and adhered to for incident identification, investigation and response, analysis and recommendations for risk management, collection of forensic data and regulatory requirements. Threat Detection, Risk & Vulnerability Management ·Develops policies, procedures and maintains scripts, routines, and software for accomplishing security studies and assessments to provide professional level analysis in recognizing system threats and vulnerabilities; leverages AI/ML-based detection tools to identify malware, anomalous behavior, and malicious activities at scale. ·Monitors and reviews intrusion detection systems and firewall logs, utilizing AI-driven behavioral analytics and SIEM platforms to identify adverse patterns and coordinate mitigation responses. ·Performs security assessments, risk identification and mitigation planning and execution. ·Leads vulnerability management efforts and actively participates in patch management and risk management processes. ·Participates in emergency operations, including the Computer Security Incident Response Team. ·Deploys and manages AI-powered security tools including AI-driven SIEM, endpoint detection and response (EDR), and user and entity behavior analytics (UEBA) platforms to improve detection accuracy and reduce mean time to respond (MTTR). ·Evaluates emerging AI-driven attack vectors (e.g., adversarial AI, AI-generated phishing, deepfake social engineering) and develops countermeasures to protect company assets. Research, Training & Awareness ·Research technical and IT security topics, including developments in AI/ML security tooling, generative AI risks, and emerging threat landscapes; maintains information on industry trends. ·Assists with the development and implementation of the Cyber training and awareness program, incorporating AI-specific threat scenarios such as AI-generated phishing simulations and guidance on safe use of AI tools within the organization. AI-Augmented Security Operations ·Integrates and manages AI-powered security automation workflows, including automated alert triage, threat hunting playbooks, and AI-assisted incident response r