Information Security Engineer

About the Team/Role

We’re the Global Information Security Team at WEX, responsible for implementing and operating security technologies and processes throughout WEX. We partner closely with internal teams and customers to assure WEX operates in a secure and compliant manner. Our team holds itself to a high standard and we collaborate closely with one another to ensure strong, reliable, and effective relationships. We own our results and we take pride of ownership in everything we do.

Changing the world isn’t easy, and we have a lot of work ahead of us! From securing our applications, data centers, and cloud resources, we’ve got more work than we can handle and we’re looking for great people to come along for the ride. We are looking for a security engineer responsible for multiple general security practices and toolsets.

How you’ll make an impact

• Engineer, implement, and monitor security measures to protect the enterprise

• Configure and troubleshoot security infrastructure devices, applications, and tools

• Regularly review configurations and develop improvement plans

• Develop technical solutions and new security tools to help mitigate security findings

• Write comprehensive reports including assessment-based findings, outcomes, and recommendations for security enhancement. 

• Have a general background in IT, security, and supporting technologies

• Experience working with compliance and regulatory frameworks such as PCI-DSS, SOX, GDPR, NIST, etc.

• A highly motivated security engineer who loves working on small, high performing teams, that interface with the entire enterprise

• A collaborative, solid communicator who works well with your team and outside stakeholders to drive projects from inception to completion

• Someone who cares deeply for team results but is able to work independently to deliver high quality solutions for projects and operational tasks

• Comfortable balancing the need to move fast with the realities of working in a highly regulated organization

• Someone who thrives in situations where details and accuracy are vital

• A skilled worker that has the motivation, expertise, and work ethic to operate independently across global time zones, and who is able to complete tasks and deliverables with minimal oversight

• Someone with experience working closely with Enterprise IT teams on securing infrastructure and applications.

Experience you’ll bring

• Understanding of cybersecurity principles and concepts.

• Strong analytical and problem-solving skills.

• Excellent communication and teamwork abilities.

• Willingness and desire to learn and adapt to new technologies and concepts.

• Experience in Information Security Engineering in an Enterprise environment

• Broad experience with security technologies such as EDR, DLP, Email Security (SPF, DMARC, DKIM), SASE, etc.

• Have a practical understanding of modern cloud IT infrastructure, networking, and security engineering concepts

• Ability to troubleshoot network and security issues within a complex environment

• Experience in engineering solutions which meet security, compliance, and business needs

• Ability work in an on-call rotation, which may include some night and weekend shifts

• Excellent customer support skills, both written and verbal

• It would be nice if you:

• Have cloud knowledge of AWS and Azure

• Have experience working with SIEM solutions

• Have experience working with keys and certificates 

• Have experience working with CrowdStrike

• Have experience with email security

• Have experience with automation technologies (SOAR) and writing code for automation.