Information Security Engineer

About Us:

We were founded in 1993 on the simple belief that we can save the world from our competition by solving the insurance industry’s most challenging problems with innovative solutions and extraordinary service. We have proven it.

As one of the leading international travel insurance and specialty benefit management companies in the world, we service over 800,000 customers each year including international travelers, US government agencies, corporations, foreign governments, and insurance companies.

With a diverse and growing global workforce of the best and brightest talent, Seven Corners is a fast-paced, innovative company with no plans to slow down soon.

Our values drive each decision we make and each action we take. They are our guide to how we treat each other and our customers. These beliefs are the heart of the company culture and define what it means to work at Seven Corners.

Our Culture

Our culture is what makes us “us” it is the unique vibe you feel when you walk through our doors, the passion we bring to creating innovative solutions and the extra mile we go to put our customers first. It is a way of feeling and behaving toward each other and our customers. It is the values we hold to be true. It is in every decision we make and every action we take.

Our Values

Customers come first

We innovate

We do the right thing

We own the solution

We are precise

What you would do here

The Information Security Engineer is an integral member of the Infrastructure and Operations team and the broader Information Technology organization. This role is responsible for protecting Seven Corners' information assets, systems, networks, and data by implementing, monitoring, and continuously improving security controls, processes, and technologies.

The Information Security Engineer plays a critical role in identifying, assessing, and mitigating cybersecurity risks across on-premises, cloud, and SaaS environments. Working closely with Infrastructure, Operations, Application Development, Compliance, and business stakeholders, this position helps develop and implement security best practices that support the organization's security, regulatory, and business objectives.

This role is responsible for the administration, monitoring, and improvement of security technologies, including endpoint protection, SIEM, identity and access management, vulnerability management, email security, web application firewalls, intrusion detection and prevention systems, cloud security platforms, and related security tools.

The Information Security Engineer will investigate security incidents, conduct threat and vulnerability analysis, coordinate remediation efforts, and support security awareness and governance initiatives. The role will also participate in maintaining and improving the organization's Information Security Management System (ISMS), supporting internal and external audits, risk assessments, security policies, and ongoing compliance efforts aligned with ISO 27001 and other applicable regulatory and security frameworks (e.g., HIPAA, PCI DSS).

A strong understanding of cloud infrastructure, identity management, security architecture, and modern cybersecurity practices is required. Deep knowledge of network protocols, application security, threat detection, incident response, and endpoint security is highly desirable.

What you already know and have done

• Design, implement, and maintain security controls across identity, endpoint, network, cloud, and infrastructure environments
• Administer and optimize security technologies, including SIEM, EDR, MFA, Conditional Access, Identity and Access Management, and Data Loss Prevention
• Monitor the organization's security posture and proactively identify, assess, and remediate vulnerabilities and security risks
• Investigate, contain, and support the resolution of security incidents and other cybersecurity events
• Evaluate emerging threats, vulnerabilities, and technologies, and recommend appropriate mitigation strategies
• Participate in security architecture reviews and provide security guidance for projects, system implementations, and technology initiatives
• Develop, maintain, and enforce technical security standards, procedures, and best practices
• Automate security monitoring, reporting, and operational processes to improve efficiency and effectiveness
• Support the organization's Information Security Management System (ISMS), including risk assessments, security policies, compliance initiatives, and audit activities
• Evaluate organizational compliance with applicable regulatory frameworks through annual gap assessments and remediation planning
• Conduct third party vendor security risk reviews
• Create and maintain security documentation, standards, procedures, and supporting compliance evidence
• Partner with internal teams, vendors, and third-party security consultants to implement and improve security capabilities
• Participate in change management processes to ensure security requirements are appropriately reviewed and addressed