Remote InfoSec Engineer

Job Description:

• Compliance & Frameworks: Prepare us for our upcoming SOC 2 and SOC 1 audits, including gap analysis, control review, and evidence collection.
• Security Architecture & Engineering: Review and harden our current AWS and Agentic AI infrastructure
• Vendor Risk Management: Streamline our third-party vendor review process and help fill out security questionnaires for our enterprise prospects.
• Tooling & Monitoring: Evaluate, and monitor security tooling MDM, endpoint protection, SIEM.
• Incident Response: Update and test our Disaster Recovery Plan and conduct security awareness training for the broader team.

Responsible:

Must have:

• Experience: 5+ years of dedicated Information Security experience (prior experience consulting or working fractionally is a plus).
• Framework Expertise: Deep, hands-on knowledge of SOC 2 Type II, SOC 1 Type II, and TX-RAMP.
• Technical Knowledge: Comfort working in an AWS SaaS-based environment. Familiarity with tools like CrowdStrike, Intune, Moysle, and SonarQube.
• Communication: Ability to translate complex security risks into actionable business decisions for leadership.
• English: At least an upper-intermediate skill level of English

Remote VNT

Duration: 6 months

Start: 01/07/2026