Reveleer
Sr. Information Security Engineer
Rol remoto de Information Security con fit claro de ubicación del candidato.
Publicado14 jun 2026
Países elegibles1 país aceptado
Señal de senioritySenior
Modelo de trabajoRemoto
Ubicaciones aceptadas para candidatos
Estados Unidos
Resumen del rol
Sr. Information Security Engineer
Requisitos y responsabilidades
Contenido del rol extraído en secciones para revisar más rápido.
1. Cloud and Infrastructure Security
- Design and maintain secure architectures across AWS, Azure, and GCP environments.
- Implement guardrails and controls using services such as AWS Security Hub, GuardDuty, Config, and IAM.
- Conduct regular vulnerability scans, configuration reviews, and remediation tracking for infrastructure and workloads.
- Develop and enforce network segmentation, encryption, and key management policies.
2. Application & SaaS Security
- Collaborate with DevOps and Engineering to integrate security into CI/CD pipelines (Snyk, StackHawk, etc.).
- Perform threat modeling, code reviews, and secure design reviews for microservices and APIs.
- Support penetration testing and application security validation efforts.
- Help ensure PHI/PII is protected across all SaaS platforms.
3. Endpoint & Identity Security
- Manage and enhance EDR/XDR solutions (e.g., Cortex, Defender for Endpoint).
- Implement and monitor identity security controls through Microsoft Entra ID (Azure AD), Conditional Access, and PIM.
- Support Intune and MDM compliance policies for Windows, macOS, and mobile devices.
4. Security Operations & Incident Response
- Monitor alerts, investigate incidents, and coordinate responses with the SOC.
- Develop and improve incident response runbooks, playbooks, and forensic analysis procedures.
- Support SIEM integrations and continuous improvement of detection use cases.
5. Governance, Risk & Compliance
- Support audits and evidence collection for HIPAA, HITRUST, SOC 2, and customer security assessments.
- Maintain asset inventories, risk registers, and remediation tracking.
- Collaborate with Compliance to ensure alignment between security controls and policies.
- Contribute to security awareness and training initiatives.
Qualifications
- Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
- 5+ years of experience in security engineering or related technical security roles.
- Strong knowledge of cloud-native security (AWS, Azure) and modern SaaS architectures.
- Hands-on experience with SIEM, EDR/XDR, IAM, vulnerability management, and security automation.
- Familiarity with HIPAA, HITRUST, and SOC 2 requirements.
- Experience securing containerized and serverless workloads (e.g., EKS, Lambda).
Preferred:
- Certifications such as CISSP, CISM, CCSP, AWS Security Specialty, or GIAC (GSEC, GCIA, GCIH).
- Experience with Terraform, Ansible, or CloudFormation for infrastructure-as-code security.
- Experience in DevSecOps pipelines and tools (e.g., Jenkins, Bitbucket).
- Strong scripting skills (Python, PowerShell, or Bash).
Key Competencies
- Analytical and detail-oriented with strong problem-solving skills.
- Ability to balance business needs with risk mitigation.
- Excellent communication skills, able to translate complex technical topics for non-technical stakeholders.
- Collaborative team player with a proactive approach to continuous improvement.
Roles similares
Mantén una lista de respaldo.
Stack
Usa estas tags para comparar roles remotos similares.
Elegibilidad de ubicación
Candidatos deberían aplicar solo cuando el país del perfil aparece aquí.
Tu perfilPaís no definidoInicia sesión para comparar tu país con este rol.
Flujo de contratación
WithMira muestra el rol y luego envía candidatos a la aplicación de la empresa.
1Revisa fit del rol, stack y elegibilidad de ubicación en WithMira.
2Abre la página de aplicación de la empresa desde el link rastreado.
3Guarda el rol o suscríbete a oportunidades similares antes de salir.