Information Security Engineer

About the role

The Information Security Engineer will design, maintain, and improve security infrastructure to ensure compliance with regulatory standards such as ISO 27001:2022 and SOC 2 Type II. This role involves evaluating security postures, managing continuous monitoring processes, and responding to security incidents. The engineer will play a key role in safeguarding the organization's data and infrastructure while driving adherence to security best practices.

Responsibilities

• Evaluate the security posture of systems, platforms, and cloud environments, establish appropriate security baselines, and drive implementation and hardening to close identified gaps.
• Quickly develop proficiency in new SIEM, EDR, and other security platforms; configure, tune, and integrate these tools with SaaS applications and diverse data sources.
• Evaluate and optimize security playbooks, runbooks, and processes based on lessons learned, tooling changes, and evolving threats.
• Conduct vulnerability assessments, system audits, and risk analysis using industry-standard scanning tools.
• Manage and implement continuous monitoring processes to ensure compliance with frameworks including ISO 27001:2022 and SOC 2 Type II.
• Actively monitor, analyze, and respond to security alerts and incidents, performing investigations and recommending corrective actions.

Required skills

• Vulnerability scanning
• Nessus
• Burpsuite
• Tenable
• Continuous monitoring
• Network security
• Firewalls
• VPN
• IDS/IPS
• Endpoint protection
• Cloud security
• Security automation
• Python
• PowerShell

Nice to have

• FedRAMP
• NIST SP 800-53
• CMMC
• PKI
• AWS GovCloud
• Azure Government

Qualifications

• 5+ years of experience in information security or a similar role

Certifications

• CISSP
• CompTIA Security+
• CAP

Benefits

• Second Fridays off
• Comprehensive benefit coverage
• Paid Parental Leave
• Adoption and fertility support
• Competitive time off
• Wellness allowance
• Mindfulness app membership
• Wellness Wednesdays
• Global Volunteer Day
• Non-profit matching

About the Company

Keyfactor is a leader in trust infrastructure for AI and machines, helping large enterprises and government agencies manage cryptographic identities. The company operates with a global team focused on secure digital interactions and innovation.