Information Security Manager – Individual Contributor

About the role

Secretlab is seeking an experienced Information Security Manager to act as the first line of defense against unauthorized access and security threats. You will work as an individual contributor within the technical team, safeguarding networks, servers, and critical information systems.

Key responsibilities

• Architect, engineer, and deploy robust security controls across networks, server infrastructure, and critical systems.
• Develop and maintain comprehensive security policies and standards aligned with ISO 27001 and NIST.
• Conduct risk assessments, vulnerability scans, and penetration tests to identify and remediate security gaps.
• Optimize automated playbooks and security configurations within advanced software suites.
• Provide architectural oversight and technical direction for core security initiatives.
• Lead incident response, digital forensics, and investigations while maintaining the incident response roadmap.
• Translate complex security findings into actionable insights for senior leadership.
• Partner with Engineering and IT to embed security into system design and development lifecycles.
• Monitor the threat landscape and evaluate new security tools to enhance defenses.

Required profile

• Advanced technical mastery of database and operating system security across Windows, macOS, and UNIX/Linux.
• Proven experience deploying and managing critical IT security infrastructure such as Next‑Gen Firewalls, SIEM, EDR, and DLP solutions.
• Deep expertise in network security protocols (TCP/IP, DNS, VLANs) and sophisticated monitoring toolsets.
• Strong knowledge of cybersecurity principles, defensive techniques, and secure coding standards.
• Extensive experience securing web applications and service‑oriented architectures.
• Proficiency in scripting languages (Python, PowerShell) for automation and custom security solutions.

Required skills

• Windows, macOS, UNIX/Linux security
• Next‑Gen Firewalls
• SIEM
• EDR
• DLP
• TCP/IP, DNS, VLANs
• Python
• PowerShell
• ISO 27001
• NIST
• Vulnerability scanning
• Penetration testing
• Incident response
• Digital forensics
• Security policy development
• Risk assessment
• Automated playbooks
• Security configuration management
• Threat monitoring
• Security tool evaluation