Information Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Engineer securing Keyfactor’s cryptographic trust infrastructure. Managing monitoring, vulnerability assessments, incident response, and ISO 27001/SOC 2 compliance.
Responsibilities:
- Evaluate the security posture of systems, platforms, and cloud environments; establish security baselines and drive implementation and hardening to close identified gaps.
- Develop proficiency in SIEM, EDR, and other security platforms; configure, tune, and integrate tools with SaaS applications and diverse data sources.
- Evaluate and optimize security playbooks, runbooks, and processes based on lessons learned, tooling changes, and evolving threats.
- Conduct vulnerability assessments, system audits, and risk analysis using industry-standard scanning tools.
- Manage and implement continuous monitoring processes supporting compliance with ISO 27001:2022 and SOC 2 Type II.
- Monitor, analyze, and respond to security alerts and incidents; perform investigations, incident handling, and recommend corrective actions.
- Safeguard organizational data and infrastructure while driving adherence to evolving security best practices.
Requirements:
- 5+ years of experience in information security or a similar role
- Proficiency in vulnerability scanning tools (Nessus, Burpsuite, Tenable, etc…) and interpreting scan results for remediation.
- Strong knowledge of security standards
- Demonstrated experience in continuous monitoring, network security, firewalls, VPNs, IDS/IPS, and endpoint protection.
- Strong analytical skills and a meticulous approach to problem-solving
- Demonstrated capability to deliver results on-time and to a defined schedule.
- Familiarity with cloud security principles
- Experience with security automation and continuous monitoring tools
- Knowledge of scripting languages (Python, PowerShell) to automate security processes
- Relevant certifications (e.g., CISSP, CompTIA Security+, CAP) are strongly preferred
- PKI knowledge a plus
- Experience with government-regulated environments (AWS GovCloud, Azure Government) preferred
Benefits:
- Second Fridays (a company-wide day off on the second Friday of every month minus November and December due to the Holiday schedule). Please note that this benefit is subject to change.
- Comprehensive benefit coverage globally.
- Paid Parental Leave is available to new parents. Structure varies based on regional/government requirements. In regions where government-paid leave doesn’t exist, like in the U.S., the company offers generous paid parental leave, along with comprehensive adoption and fertility support.
- Competitive time off globally.
- Wellbeing resources, wellness allowance, mindfulness app free membership, Wellness Wednesdays.
- Global Volunteer Day, company non-profit matching, and 3 volunteer days off.
- Monthly Talent development and Cross Functional meetings to support professional development.
- Regular All Hands meetings followed by group gatherings.
- Opportunities to grow personally and professionally.
- Entrepreneurial environment balancing autonomy and structure.
Similar Jobs
Senior Security Architect – AD/Entra ID
Senior Security Architect securing Microsoft Active Directory and Entra ID environments for GuidePoint Security’s cybersecurity clients. Designing IAM architecture, automating administration and resolving complex identity security issues.
Cybersecurity Governance Analyst
Cybersecurity governance analyst developing enterprise policies, vendor risk assessments, and compliance controls. Supporting Agero’s digital driver assistance services through audits, remediation, and security awareness.
Senior Software Engineer – Security, Distributed Systems
Senior software engineer building backend distributed systems for RapidFort’s cybersecurity and software supply chain platform. Developing secure, scalable services across Linux, containers, Kubernetes, and cloud environments.
Staff Security Engineer, Proactive Security
Staff Security Engineer leading proactive security services, infrastructure protection, and secure engineering paths at DoorDash. Building resilient products for the technology and logistics company’s delivery network.
Managing Director, Enterprise Security Architecture – Engineering
Managing Director leading enterprise security architecture and cybersecurity platforms for The Cigna Group. Advancing cloud, DevSecOps, AI security, and cyber defense at scale.
Offensive Security Engineer / Penetration Tester
Offensive Security Engineer conducting web, mobile, Active Directory and cloud penetration tests for Genesis’s global product IT ecosystem. Building automation and AI-agent workflows for offensive security.
Senior Data Security Specialist – Data Security Strategy
Especialista sênior liderando estratégia de segurança e governança de dados corporativos. Proteção de informações sensíveis com DLP, DSPM, Purview e ambientes cloud.
Senior Manager, Global Security Technology
Global Security Technology leader shaping strategy, platforms, and modernization. Managing enterprise security projects, vendors, budgets, and global capability delivery for Johnson & Johnson healthcare operations.
Industry Sales Director – Security, Surveillance & Video Connectivity
Industry Sales Director driving enterprise sales, account expansion, and partner growth for Webbing’s global cellular connectivity platform. Owning the Security & Video vertical worldwide.
Senior Information Security Engineer
Senior Security Engineer owning KPA’s enterprise security platforms, cloud, identity, and automation. Improving security across workplace-safety software, infrastructure, DevOps, and compliance environments.
Senior Software Engineer, Security
Security engineer building automated application and infrastructure security for Flex’s AI-native private bank. Protecting money movement, cloud access, vulnerability management, and secure development at scale.
Chief Information Security Officer – CISO
CISO leading cybersecurity strategy, operations, risk, and resilience for Sydney Airport’s critical aviation infrastructure. Advising executives and the Board while developing high-performing security teams.
Information Security Program Manager
Information security program manager managing U.S. customer portfolios for Cofense, a phishing defense company. Delivering simulated phishing programs, remediation reporting, and security guidance.
Head of IT, Security
Head of IT and Security owning identity, compliance, IT, and application security. Protecting OpenEd’s education platform and data for over 100,000 students.
Information Security Specialist – SoD Governance, Segregation of Duties
Especialista em segurança da informação governando SoD, IAM e RBAC na Avvale. Mitigação de riscos de acesso e conformidade para soluções empresariais inovadoras e sustentáveis.
Principal Security Engineer
Principal Security Engineer governing Fortive’s multi-cloud, AI, GitHub, and security architecture. Advising executives and leading enterprise technology strategy, governance, security, and modernization.
Security Engineering Lead
Security Engineering Lead building Product Security for Attio’s AI-native CRM. Securing customer data, leading incident response, and hiring the security team.
Security Engineering Lead
Security Engineering Lead building Attio’s Product Security function for its AI-native CRM platform. Leading application security, incident response, and security team growth.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing Omilia’s AWS conversational AI platform. Automating Terraform, GitOps, CI/CD, and cloud compliance across distributed engineering teams.
Consultor Sailpoint ISC – Identity Security Cloud
Consultor SailPoint ISC en Devoteam, consultora europea de estrategia digital y ciberseguridad. Despliegue, integración y evolución de soluciones Cyber IAM para clientes.