Information Security Lead

Job Summary

Leading the security efforts for applications and infrastructure, the full-time remote Information Security Lead will manage incident response, assess vulnerabilities, and collaborate with engineering teams to enhance security controls.

Key responsibilities

• Lead investigations of security alerts and incidents, including evidence collection and corrective actions
• Assess newly disclosed vulnerabilities and coordinate vulnerability scanning and penetration tests
• Protect web applications and APIs by reviewing architecture and implementing security measures

Required qualifications

• 5+ years in information security with hands-on experience in incident response, cloud security, and application security
• Experience securing AWS and internet-facing web applications and APIs, with knowledge of OWASP risks
• Hands-on experience with firewalls, VPN security, and endpoint protection
• Strong log analysis skills across various security sources
• Experience supporting SOC 2, PCI DSS, or similar compliance programs