Is/IT Security Engineer

What We're Looking For

How You Work
Skills and certifications matter, but what determines success here is how you approach the work, especially when the path isn't clearly defined. We're looking for someone who:

• Investigates without being pointed. You notice gaps and keep digging until you understand a problem, whether or not anyone assigned it. This shows up daily in threat identification, vulnerability review, and incident response.
• Builds to last. You fix the immediate issue, then document it, automate what repeats, and hand off work so it runs without you. Runbooks and roadmaps are part of doing the job well, not overhead.
• Moves without waiting. In a remote team, you set your own priorities and make progress without constant direction. In your first 90 days, you'll orient yourself, ask good questions, and get to work.
• Translates risk for the room. You explain risk clearly to engineers, business owners, and leadership, adjusting to your audience without creating unnecessary alarm.
• Shares what you know. You cross-train teammates, write documentation others can use, and treat security as a shared responsibility, not a gate you control.

Experience and Technical Skills

• 3+ years of mid-level cybersecurity experience as a security analyst, security engineer, systems engineer, or similar technical security role.
• Bachelor's degree or equivalent experience in Cybersecurity, Computer Science, IT, or a related field.
• An advanced, professional, or expert-level security certification is preferred.
• Hands-on experience administering or managing at least one enterprise security application or platform.
• Experience leading security projects from planning through implementation, handoff, and continuous improvement.
• Strong grasp of information security principles and incident investigation techniques, with a practical understanding of threats and risk.
• Working knowledge of network, application, endpoint, cloud, identity, and systems security architecture.
• Experience designing and implementing security controls across servers, networks, databases, cloud, and applications.
• Strong troubleshooting, automation, project management, and written communication skills.

Security Platforms and Domain Knowledge

• Experience securing multi-tenant SaaS platforms: tenant isolation, role-based access control, secure configuration, data protection, threat detection, vulnerability remediation, and incident response.
• Hands-on experience with tools such as SIEM, EDR/XDR, DLP, IDS/IPS, email security, identity security, and vulnerability management platforms.
• Experience with SOAR, CSPM, and CNAPP, ideally in an AWS-based multi-tenant SaaS environment.
• Working knowledge of NIST and SOC 2, including supporting audits, evidence collection, and remediation.

Our Values in Action
Our values describe how the work actually gets done here.

• Curiosity: You follow security developments because the space interests you. When you meet an unfamiliar threat or system, you investigate before you conclude, and you share what you learn.
• Ownership: You see security controls through from design to ongoing monitoring, including the documentation and handoff that make your work last. When an incident happens, you stay calm, drive toward resolution, and make sure the root cause is fixed, not just contained.
• Empathy: You build security processes people will actually follow, and you explain risk in terms that help others make better decisions. You mentor teammates in a way that builds capability, not dependence.

Projects

About Us
Economic Impact Catalyst (EIC) builds SaaS software that helps organizations grow local economies through data-driven decisions. We serve 100+ economic development agencies and thousands of entrepreneurs across the US. Our 35-person team works across the US, Philippines, India, and Mexico, and we're in the middle of a major platform transformation.

The Role
We're hiring a Security Engineer with 3+ years of cybersecurity experience to strengthen the security of our multi-tenant SaaS platform. You'll protect our data, applications, AWS cloud infrastructure, and business systems by improving controls, assessing risk, managing security tools, and leading incident response. The work won't be handed to you: you'll spot what needs doing, build it, and see it through with minimal oversight.

What You'll Do

• Identify threats and vulnerabilities, conduct complex security investigations, and lead incident response, containment, recovery, and follow-up activities.
• Architect, design, and implement security technologies and processes in partnership with engineering, infrastructure, application, and business owners.
• Manage, administer, monitor, and support multiple security applications; troubleshoot issues and automate operational workflows to reduce risk and improve response time.
• Measure and report on enterprise security capabilities using automated and manual tools, with clear metrics for risk, coverage, and remediation progress.
• Develop and maintain security policies, standards, procedures, runbooks, roadmaps, and business cases, and communicate them clearly to technical and business partners.
• Review new and existing systems before and after implementation to confirm security requirements and complete risk, architecture, and impact assessments.
• Develop, maintain, audit, and enhance security controls across endpoints, servers, networks, databases, cloud services, applications, identities, and data.
• Support security awareness, audits, assessments, compliance requests, and remediation activities aligned with EIC's security and governance requirements.
• Deliver security projects, mentor and cross-train team members, maintain technical documentation, and strengthen tenant isolation and secure-by-default controls across the multi-tenant SaaS platform.

What We Offer

Professional Growth

• Build and own a security function spanning cloud infrastructure, application security, compliance, and incident response.
• Work directly with Engineering, Product, and business leadership on security architecture, risk decisions, and platform controls.
• Gain deep multi-tenant SaaS, SOC 2, and AWS experience that supports certifications like CISSP, CISM, and AWS Security Specialty.
• Grow into leadership roles as EIC scales.

Work Environment

• Distributed team with flexible working arrangements.
• A collaborative, detail-oriented culture that values follow-through and clear communication.
• A supportive environment where questions and learning are encouraged.

Impact

• Protect the data of economic development organizations and the thousands of entrepreneurs building businesses in their communities.

Compensation & Benefits

• Competitive salary and benefits based on overall experience.
• Support for professional growth, learning, and certifications.

What Will Give You an Edge:

Skills that will make your application stand out: While we value how you approach the work as much as what you already know, candidates with hands-on experience in AWS Security, Incident Response, Vulnerability Management, SIEM, and SOC 2 will be especially well positioned for this role. These skills map directly to what you'll be doing from day one: securing our AWS-based multi-tenant platform, leading investigations when something goes wrong, finding and fixing risk before it becomes a problem, monitoring for threats, and supporting our SOC 2 compliance efforts. If you've worked in any of these areas, tell us about it in your application — specific examples of projects, tools, or incidents you've handled will help us understand your experience.