Information Security Lead

🕒 5 days ago

🇺🇸 United States – Remote

💵 $150k - $165k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

PeopleFinders

WebsiteLinkedInAll Job Openings

51 - 200 employees

🌐 Web 3

Web 3

PeopleFinders is a company dedicated to helping individuals find people and learn more about them through a comprehensive online search service. With access to over 120 billion public records from more than 6,000 sources, PeopleFinders allows users to conduct quick and in-depth people searches, background checks, and reverse phone lookups. The service is designed to provide detailed contact information, criminal histories, property records, and other public records for individuals in the U. S. PeopleFinders emphasizes safe and responsible use of its services to aid in reconnecting with lost acquaintances, verifying contact information, or simply exploring one's digital footprint. The company has been operating for three decades, making it one of the most experienced people finder services on the market.

📋 Description

• Own day-to-day security for applications, infrastructure, and internal systems • Lead end-to-end investigations of security alerts and incidents, including scoping, evidence collection, containment, root-cause analysis, corrective actions, and reporting • Coordinate with the managed detection and response provider, triage escalations, and track findings to closure • Maintain incident response procedures, runbooks, and evidence-handling practices • Assess newly disclosed vulnerabilities and supply-chain events across applications, containers, cloud, network devices, and endpoints • Run vulnerability and external scanning programs, coordinate penetration tests, track remediation, and verify vendor fixes • Protect web applications and APIs through architecture, authentication-flow, and code-change security reviews • Lead bot mitigation, scraping prevention, fraud signals, rate limiting, and traffic analysis • Assess and monitor third-party JavaScript, advertising, and tag-management content • Partner with developers on secure coding, OWASP risks, remediation, and CI/CD security checks • Secure AWS environments and containerized workloads • Help secure Snowflake, SQL Server, MongoDB, and data pipelines with access control and sensitive-data protection • Manage firewall, VPN, remote-access, endpoint, and device security • Drive least-privilege access, MFA, secrets management, privileged-access controls, and periodic access reviews • Maintain security policies and policy exceptions • Support SOC 2, PCI DSS, and privacy obligations with evidence, audit responses, and control improvements • Conduct vendor security reviews and help select security tools and services • Translate security risks into options and trade-offs for executives and engineering leaders • Document decisions and changes in the ticketing system • Promote security awareness and build safe automation and AI-assisted tooling

🎯 Requirements

• 5+ years in information security, with hands-on experience across at least three of: incident response, cloud security, application security, network security, vulnerability management • Experience leading security incidents from detection through root cause and reporting • Hands-on experience securing AWS and internet-facing web applications and APIs; working knowledge of OWASP risks • Experience with firewalls and VPN/remote-access security, and with endpoint protection (EDR/AV) and device management • Experience with WAF, bot management, DDoS protection, and CDN security • Strong log analysis skills across firewall, application, cloud, and identity sources • Working knowledge of IAM, MFA, encryption, and secrets management • Experience supporting SOC 2, PCI DSS, or similar compliance programs • Scripting and API skills (Python, PowerShell, or similar) for investigation and automation • Excellent written communication, including executive-level updates • Ability to prioritize by business impact and likelihood, and to explain that reasoning • Must pass a background check

🏖️ Benefits

• Flexible PTO • 6% 401K match • 100% of the cost paid for the employee for medical, dental and vision • 75% of the cost paid for dependents for medical, dental and vision

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume