Experience in information security roles (3+ years)