Information Security Engineer

Job Summary

Seeking a mid-level Information Security Engineer, this remote role will manage vulnerabilities across SaaS products and infrastructure, lead SOC 2 compliance efforts, and enhance security posture in Microsoft Azure while collaborating with cross-functional teams.

Key responsibilities:

• Lead the company's SOC 2 compliance program, including readiness, control implementation, and coordination with auditors
• Oversee the vulnerability management program, including identification, triage, and remediation tracking across products and infrastructure
• Enhance the security posture of the Microsoft Azure environment through configuration hardening and continuous monitoring

Required qualifications:

• 4-6 years of professional experience in information security, application security, or cloud security
• Experience preparing for SOC 2 Type 2 attestations for SaaS products
• Hands-on experience securing SaaS applications and workloads in Microsoft Azure
• Demonstrated experience with vulnerability management tooling and processes
• Working proficiency with Microsoft Intune, Microsoft Defender, Datadog, GitHub, and Snyk