Lead InfoSec Engineer

Job Summary

Managing projects focused on reducing cybersecurity risks, the full-time Lead InfoSec Engineer will oversee the vulnerability management program, ensuring effective monitoring and remediation of system vulnerabilities in a remote-friendly environment.

Key responsibilities:

• Contribute to the vulnerability management process by triaging and tracking identified vulnerabilities through their lifecycle
• Partner with engineering teams to monitor cloud and container infrastructure for known vulnerabilities
• Install, monitor, and administer vulnerability scanning tools while ensuring scheduled scans cover all intended assets

Required qualifications:

• Bachelor's degree in Computer Science or related field, or equivalent experience/training
• 5+ years in an Information Security or IT role, with experience in vulnerability management or related fields
• Proficiency with enterprise vulnerability management platforms such as Tenable.io, Rapid7, or Qualys
• Strong skills in engineering and operational tools like Terraform, Ansible, Git, and Docker
• Knowledge of CI/CD practices and experience integrating security requirements into the software development lifecycle