Senior Information Security Engineer

Senior Information Security & Compliance Engineer

Position Overview

The Senior Information Security & Compliance Engineer reports to the Senior Infrastructure Manager and plays a critical role in safeguarding the organization's systems, data, and regulatory posture. This individual is responsible for developing, administering, and enhancing security controls, compliance initiatives, and risk management practices across the enterprise.

Serving as a key security subject matter expert, the role focuses on operational cybersecurity, governance, audit readiness, vulnerability management, and compliance oversight within a SOC 2 Type II cloud-based software environment. The position combines hands-on technical expertise with regulatory and customer-facing compliance responsibilities to help ensure a secure and compliant operating environment.

Primary Responsibilities

• Oversee day-to-day cybersecurity operations in collaboration with managed security providers and technology partners.
• Direct vulnerability assessment activities and coordinate remediation efforts across systems and applications.
• Participate in the detection, analysis, containment, and resolution of security incidents.
• Manage and maintain security technologies such as SIEM platforms, endpoint protection solutions, email security systems, vulnerability management tools, and identity security controls.
• Contribute to the creation, review, and ongoing enhancement of security policies, practices, and governance documentation.
• Facilitate internal and external audit engagements, including preparation and collection of supporting evidence.
• Perform security risk evaluations and technical control assessments.
• Assist with customer due diligence reviews and responses to security-related inquiries.
• Ensure adherence to established security requirements, regulatory obligations, and compliance standards.
• Work closely with infrastructure and software development teams to strengthen the organization's overall security posture.
• Review proposed system and process changes for security implications and compliance alignment.
• Monitor corrective action plans and drive continuous improvement initiatives across the security program.

Required Experience & Qualifications

• Minimum of seven years of professional experience in cybersecurity or information security.
• Hands-on background in security engineering, security operations, or related disciplines.
• Experience supporting compliance programs such as SOC 2, ISO 27001, or comparable frameworks.
• Strong understanding of vulnerability identification, prioritization, and remediation processes.
• Experience working with security monitoring platforms, endpoint detection technologies, and threat management tools.
• Knowledge of identity and access management principles and best practices.
• Experience contributing to incident response and cybersecurity investigations.
• Excellent communication, documentation, and stakeholder engagement skills.

Preferred Experience & Credentials

• Industry certifications such as CISSP, GSEC, Security+, or equivalent credentials.
• Previous experience supporting software-as-a-service (SaaS) organizations.
• Familiarity with cloud security architecture and related security technologies.
• Experience leading or supporting customer security reviews and assessments.
• Background conducting risk assessments, control evaluations, and compliance reviews.