IT Security Engineer

Job Summary

Focused on safeguarding employee-facing software and data, the full-time IT Security Engineer will manage internal security operations, compliance with industry standards, and vendor risk assessments while working remotely.

Key responsibilities

• Own and maintain internal security controls aligned with FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP requirements
• Conduct vulnerability management, incident response, and security monitoring to ensure a robust security posture
• Evaluate and manage vendor security risks, ensuring compliance with established security frameworks

Required qualifications

• Hands-on experience with SOC 2 Type II audits or equivalent frameworks, including direct interaction with auditors
• 2+ years of experience in a dedicated security role with primary responsibilities in security
• Proficiency in SIEM, EDR, incident response, and vulnerability management tools
• Strong knowledge of security practices related to endpoint, network, identity, and data protection
• Experience with scripting (PowerShell or Python) for automating security checks and evidence collection