Information Security Engineer

Over 720 employees work across sales, engineering, consulting and the SOC. Annual revenue from managed services has grown every year since 1992. Background checks are required, and some client work requires a government clearance.

About the role

We are adding an Information Security Engineer to our Security team. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This role is fully remote within the US. Please make sure you have a quiet place to work and a solid internet connection.

What you'll do

• Automate security checks in CI/CD pipelines
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Coordinate external penetration tests and track remediation
• Review code and pull requests for security issues
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Own secrets management, key rotation and KMS policies
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID

Qualifications

• 3+ years in security engineering, application security or a related engineering role
• Experience with SIEM, EDR or vulnerability management tools
• Ability to explain security issues to engineers without lecturing them
• Good judgment on risk: knowing what to fix now and what can wait
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements
• Programming or scripting ability in Python, Go or similar

The salary range for this role is $146,000 - $200,000 a year. This range reflects base salary only.

Perks and benefits

• Health, dental and vision coverage starting on day one
• 401(k) with company match
• Paid sick leave
• Short- and long-term disability
• 12 weeks of paid parental leave
• Flexible spending account

EOE. We participate in E-Verify.

We review applications on a rolling basis.

Apply with your resume. A cover letter is optional.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Everard Secure LLC.