Senior IT Security Engineer

About INIT

INIT Innovations in Transportation, Inc.

is a leading provider of hardware, software, service, support, and operations management solutions for public transportation companies across North America.

As a turnkey supplier, INIT develops, produces, installs, and maintains integrated hardware and software solutions for all key tasks required by transportation authorities, including fare collection systems, passenger counting, CAD/AVL systems, passenger information systems, and other Intelligent Transportation System solutions.

Our Information Technology team designs, builds, operates, and maintains infrastructure in support of INIT software solutions deployed for transit agency customers in major metropolitan areas including Atlanta, Houston, Los Angeles, San Diego, Seattle, Portland, Tampa, Honolulu, and more.

Position Summary

INIT is seeking a Senior IT Security Engineer to drive security controls, security operations and GRC activities across INIT's internal corporate infrastructure and customer-facing transit technology deployments.

This role contributes to the security architecture, security operations and control framework across PCI DSS, SOC 2, and ISO 27001.

The Senior IT Security Engineer works closely with the IT Security Administrator, IT Operations, and IT Systems Engineering teams, and reports to the Director of IT.

Key Responsibilities

Security Strategy

• Establish security vision, strategy, and roadmaps with the Director of IT, encompassing internal programs and customer-facing security commitments.

• Direct the selection and lifecycle of security tools, architectures, and infrastructure security direction across the organization.

• Establish identity, access, and security hardening standards, including Conditional Access, privileged access, and CIS benchmark requirements, for implementation across the environment.

• Evaluate security requirements and architecture for customer projects and proposals, identifying gaps, strategies, and budgets needed to meet requirements, and make final decisions on customer project security architecture.

• Identify strategic trends affecting the company's security posture and customer trust.

• Evaluate and guide secure adoption of AI tools and platforms across IT and business functions, balancing productivity gains against data protection, compliance, and vendor risk.

Security Operations

• Serve as incident commander or alternate incident commander during security incidents.

• Direct threat intelligence efforts, monitoring emerging threats, vulnerabilities, and attacker techniques relevant to the transit technology industry, and translating findings into operational and architectural changes.

• Lead the tabletop exercise program, setting cadence, scope, and participation across technical and business stakeholders, and direct post-exercise and post-incident retrospectives that translate findings into playbook and control updates.

• Communicate security ...