Information Security Engineer

Job Summary

Owning security in a fully remote capacity, the full-time Information Security Engineer (CISO track) will manage AWS security, build security into the development pipeline, and automate compliance processes while preparing to grow into a CISO role.

Key responsibilities

• Manage security in the AWS environment, including IAM, network segmentation, and logging
• Integrate security practices into the development pipeline through code reviews and threat modeling
• Lead vulnerability management and incident response efforts, including writing runbooks and conducting drills

Required qualifications

• 5+ years of experience in security engineering or security-heavy infrastructure, with a focus on AWS security
• Proficiency in Python and Terraform or similar automation tools
• Experience with SOC 2 compliance, particularly owning a Type II audit
• Familiarity with privacy legislation and financial services customer scrutiny
• Strong written communication skills for remote collaboration and policy documentation