Security Engineer

LanceSoft, Inc. is a prominent staffing firm in the US, and they are seeking a Security Engineer to support a strategic Vendor Connection initiative. This role focuses on enhancing vendor access governance and security within the enterprise environment by working closely with various stakeholders to standardize processes and improve visibility into vendor connectivity.

Responsibilities:

• Document and inventory existing vendor connection methods across the enterprise
• Analyze vendor access and associate existing connections with appropriate vendor engagements
• Support data cleanup efforts to improve visibility into vendor connectivity
• Help define and operationalize standardized vendor access provisioning patterns
• Partner with cybersecurity and Third Party Risk teams to implement secure vendor access processes
• Support adoption of new vendor onboarding and access governance procedures
• Review vendor network access and validate alignment with established security standards
• Document secure connection patterns including VPN, API integrations, remote access, direct network connectivity, and other approved connection methods
• Collaborate with project leadership to provide status updates and meet project milestones
• Produce clear documentation and process artifacts supporting long-term vendor access governance

Requirements:

• Experience supporting Third Party Risk Management (TPRM) programs
• Knowledge of vendor security assessments and vendor risk concepts
• Experience reviewing and documenting vendor network connectivity
• Security access management experience
• Network access review experience
• Strong documentation and process improvement skills
• Experience working with cross-functional cybersecurity and infrastructure teams
• Ability to organize large volumes of data and improve data quality
• Strong communication and stakeholder management skills
• 5+ years supporting Third Party Risk, Vendor Security, Cybersecurity Governance, or Information Security
• Experience documenting technical processes and operational procedures
• Experience collaborating with cybersecurity, infrastructure, networking, and business stakeholders
• Experience working within structured project environments and meeting defined deliverables
• Identity and Access Management (IAM) exposure
• Privileged Access Management (PAM) familiarity
• Knowledge of least privilege, multi-factor authentication (MFA), and access governance best practices
• Experience creating security standards or operational playbooks
• Experience supporting large enterprise cybersecurity initiatives
• Retail or Fortune 500 enterprise experience