Information Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🌐 United States, Spain – Remote

🇺🇸 United States – Remote 🇪🇸 Spain – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HSP Group

WebsiteLinkedInAll Job Openings

51 - 200 employees

🤝 B2B

💼 Consulting

📋 Compliance

B2B • Consulting • Compliance

HSP Group helps companies manage their international operations and expand globally. We provide HQ-based finance, tax, legal and HR personnel with a simplified, turnkey approach to ensure efficient operations, full compliance with local regulations, and needed consistency across each geography.

📋 Description

• Lead the company’s SOC 2 compliance program, including readiness, control implementation, evidence collection, ongoing monitoring, remediation, and auditor coordination • Lead vulnerability management across SaaS products, cloud infrastructure, containers, and endpoints • Operate and tune SAST, SCA, and dependency-scanning tools and partner with engineering on remediation • Monitor runtime and infrastructure telemetry, investigate alerts, and lead containment and follow-up actions • Track and report vulnerability SLAs, mean-time-to-remediate, and security KPIs to leadership • Enhance Microsoft Azure security across identity, networking, data, and workloads • Administer and improve Microsoft Intune for endpoint configuration, compliance, and mobile device management • Tune and maintain Microsoft Defender for threat detection, response, and reporting • Draft, update, and maintain information security policies, standards, and procedures • Lead responses to customer and prospect security questionnaires, RFPs, and due-diligence requests • Support vendor risk assessments, third-party security reviews, audits, evidence collection, and remediation • Partner with Engineering on secure SDLC practices, threat modeling, and code review guidance • Contribute to security awareness training and phishing simulations • Mature incident response playbooks and participate in tabletop exercises and on-call rotations as needed

🎯 Requirements

• 4–6 years of professional experience in information security, application security, cloud security, or a closely related role • Experience preparing for SOC 2 Type 2 attestations for SaaS products • Hands-on experience securing SaaS applications and workloads running in Microsoft Azure • Experience with vulnerability management tooling and processes, including triage, prioritization, and remediation through engineering teams • Working proficiency with several of Microsoft Intune, Microsoft Defender, Microsoft Purview, Datadog, GitHub Advanced Security/Dependabot/code scanning, and Snyk • Understanding of identity and access management, particularly Microsoft Entra ID, conditional access, and least-privilege design • Experience writing or substantially contributing to security policies, standards, or procedures • Experience responding to customer security questionnaires and supporting compliance efforts • Strong written and verbal communication skills and ability to translate technical risk for technical and non-technical stakeholders • Nice-to-have certifications include CISSP, CCSP, AZ-500, SC-200, SC-100, GCIH, and GSEC • Nice-to-have experience with container and Kubernetes security, threat modeling, secure code review, penetration testing, SaaS companies, or regulated industries