Information Security Engineer

Job Summary

Working remotely on a full-time basis, the Information Security Engineer will design and review security architecture for cloud environments, maintain application security tooling, and collaborate with development teams to identify and remediate vulnerabilities.

Key responsibilities

• Review and design cloud security solutions for Azure and AWS, providing architecture guidance to teams
• Perform threat modeling with development teams and support the integration of security controls into CI/CD pipelines
• Participate in incident response activities and maintain documentation of security controls and procedures

Required qualifications

• 5-7 years of experience in information security and technical engineering, particularly in cloud and application security
• Strong experience securing Microsoft Azure and Amazon AWS environments
• Hands-on experience with infrastructure as code tools like Terraform, ARM, or Bicep
• Ability to read and understand application code in languages such as .NET, Python, Ruby, or Node.js
• Working knowledge of OWASP Top 10 and threat modeling methodologies