Job DescriptionJob Description
Information Security Engineer
We're looking for a hands-on Information Security Engineer who enjoys keeping systems secure, threats out, and auditors happy. This role blends day to day security engineering with GRC work across our production environment.
What You'll Do
- Harden systems, patch vulnerabilities, and keep configurations secure
- Monitor logs and alerts, respond to incidents, and investigate "that looks suspicious" moments
- Manage security tools (SIEM, endpoint protection, vulnerability scanners)
- Assess security impact of system changes before they become problems
- Support risk assessments, audits, and compliance efforts
- Create and maintain security policies, documentation, and metrics
What We're Looking For
- 5-8 years of experience in security engineering, operations, or GRC
- Strong grasp of security principles and frameworks (NIST, CIS, ISO 27001, SOC 2)
- Experience securing Windows and/or Linux environments
- Comfortable in a small team where you wear multiple (secure) hats
- Bachelor's degree or equivalent experience; security certs are a plus