Information Security Engineer

Job Summary

As the first dedicated Information Security Engineer on a full-time remote basis, the successful candidate will manage security in the AWS environment, build security into the development pipeline, and automate compliance processes, ultimately growing into a CISO role.

Key responsibilities

• Own security in the AWS environment, including IAM, encryption, and logging
• Integrate security measures into the development pipeline and automate compliance evidence collection
• Lead vulnerability management, incident response, and customer security reviews

Required qualifications

• 5+ years of experience in security engineering or security-heavy infrastructure, with a focus on AWS security
• Proficiency in Python and Terraform or similar automation tools
• Experience with SOC 2, ideally owning a Type II audit
• Familiarity with financial services customer scrutiny and regulatory requirements
• Strong written communication skills for remote collaboration