Senior Information Security Specialist

🕒 September 11

🇺🇸 United States – Remote

💵 $120k - $160k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Halcyon's careers page, not through a job board

First seen by Remote Rocketship September 11

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Halcyon

Halcyon

51 - 200 employees

Founded 2021

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

Cybersecurity • SaaS • Enterprise

Halcyon is a cybersecurity company focused on providing advanced ransomware threat protection. Their platform offers a comprehensive approach to securing organizations against ransomware attacks through innovative technologies, including prevention, detection, and recovery solutions. Halcyon's services are designed to adapt and integrate seamlessly into existing security infrastructures, aiming to eliminate the risk of ransomware by intercepting attacks before they execute and ensuring rapid recovery from incidents.

📋 Description

• Support the advancement of Halcyon’s cybersecurity and GRC programs. • Perform and maintain third-party risk assessments and track vendor remediation activities. • Coordinate and analyze internal and external security testing, including vulnerability scans and penetration tests. • Develop, track, and follow up on corrective action plans for security gaps or audit findings. • Collaborate with managed security service providers and internal stakeholders to monitor and manage security events and escalations. • Partner with engineering and operations teams to implement security and compliance requirements. • Develop, maintain, and communicate information security policies, standards, and procedures. • Coordinate security incident response planning, disaster recovery testing, and business continuity exercises. • Monitor and support enforcement of technical and administrative security controls across the enterprise. • Stay current with evolving security and privacy regulations and frameworks, including SOC 2, ISO 27001, TX-RAMP, and FedRAMP.

🎯 Requirements

• 5+ years of experience in information security, GRC, or IT risk management. • Strong understanding of cybersecurity concepts, controls, and risk frameworks. • Demonstrated experience with third-party risk management processes and tooling. • Proven ability to coordinate security testing and vulnerability management efforts. • Excellent communication, documentation, and cross-functional collaboration skills. • Ability to assess and implement technical and administrative controls across cloud and hybrid environments. • Experience with regulatory compliance and audit support in fast-paced environments. • Hands-on participation in incident response or disaster recovery exercises is a plus. • Experience with compliance platforms such as Drata or Vanta is a bonus qualification. • Knowledge of NIST 800-53 or CIS Controls is a bonus qualification. • Familiarity with secure software development practices or DevSecOps principles is a bonus qualification. • Background in auditing or supporting third-party security assessments is a bonus qualification. • Experience with Microsoft 365 and/or Google Workspace security configuration is a bonus qualification. • Exposure to HIPAA, GDPR, or CCPA regulatory environments is a bonus qualification. • CISSP, CISA, CISM, Security+, or similar certifications are a plus.

🏖️ Benefits

• Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents. • Short and long-term disability coverage, basic life and AD&D insurance plans. • Medical and dependent care FSA options. • 401k plan with a generous employer contribution. • Flexible PTO policy. • Parental leave. • Generous equity offerings. • Bonus or commission plan eligibility for certain roles. • Additional discretionary bonuses/incentives and equity may be available.

Apply Now

Similar Jobs

🕒 September 11

MRO

1001 - 5000

🏥 Healthcare

☁️ SaaS

📋 Compliance

Information security advisor managing HITRUST and SOC 2 assurance for MRO. Driving Vanta-based audits, risk management, incident response, and compliance readiness.

🕒 September 11

FAR.AI

11 - 50

🤖 Artificial Intelligence

📚 Education

🤝 Non-profit

IT & Security Manager securing systems, devices, identity, and networks for FAR.AI, a nonprofit AI safety research institute. Building scalable internal IT and security operations.

🕒 September 11

Horizon Industries, Limited

201 - 500

💼 Consulting

☁️ SaaS

🔒 Cybersecurity

Cybersecurity Specialist supporting DISA enterprise software systems at Horizon Industries, an IT and management consulting firm. Providing information assurance and security engineering in an agile environment.

🕒 September 11

Danaher Corporation

10,000+ employees

🏥 Healthcare

💼 Consulting

📦 Logistics

Platform Information Security Officer leading global cybersecurity across Danaher Diagnostics operating companies. Securing regulated medical devices, clinical data, manufacturing environments, and enterprise systems.

🕒 September 10

Veeam Software

1001 - 5000

💼 Consulting

📦 Logistics

☁️ SaaS

Field Security Advisor helping Veeam, a data resilience and security company, prepare Global 2000 customers for cyber extortion. Designing tabletop exercises, advisory content, and executive workshops.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok