Information security engineer (is engr i)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Engineer (IS Engr I) based in United States.

The Information Security Engineer will help advance enterprise security initiatives across cloud infrastructure, vulnerability management, AI security, and risk governance. You will lead Azure security projects, work directly with development teams to remediate vulnerabilities, and help ensure that emerging AI tools and integrations meet established security standards. The role also involves evaluating AI agents and Model Context Protocol (MCP) servers, conducting access reviews, and assessing vendor and application risks early in the development lifecycle. You will collaborate with cloud architects, engineers, and security stakeholders to implement controls and strengthen the organization’s overall security posture. This opportunity is well suited to an independent, proactive security professional who can manage projects with minimal supervision and communicate effectively across teams. The position is fully remote and offers the opportunity to contribute to evolving security practices, including post-quantum cryptography readiness.

Accountabilities

• Lead Azure cloud security engineering projects, including implementing and enabling security controls that strengthen infrastructure protection and support organizational security objectives.
• Represent the security function on the Cloud Architecture Review Board and Change Advisory Board, contributing security expertise to architecture decisions and planned system changes.
• Help develop a post-quantum cryptography readiness plan to prepare the organization for emerging cryptographic risks and future security requirements.
• Drive vulnerability identification, prioritization, and remediation in collaboration with development teams, using CrowdStrike, OX Security, or comparable tools to track issues through resolution.
• Participate in the security on-call rotation, investigating and triaging security events through CrowdStrike Falcon Complete and coordinating appropriate responses.
• Evaluate AI tools, integrations, and agents before deployment to identify security weaknesses, data exposure risks, and access-control concerns.
• Review and approve MCP servers according to the organization’s governance framework, ensuring that integrations and agent capabilities adhere to established security requirements.
• Support the AI Steering Committee by defining and communicating security requirements for AI initiatives, including appropriate controls for enterprise data access and agent permissions.
• Assess vendor requests, employee software requests, and third-party integrations, approving or rejecting them based on security risks and organizational risk tolerance.
• Conduct architecture, product, and engineering design risk reviews early in the software development lifecycle to identify and address potential security issues before deployment.
• Own quarterly access reviews for all users, helping ensure that permissions remain appropriate and aligned with security policies.
• Manage security initiatives independently, communicate progress and risks to relevant stakeholders, and follow through on identified issues until they are resolved.

Requirements:

• Have at least 5 years of experience in security engineering, cloud security, or a closely related information security discipline.
• Demonstrate hands-on experience with Microsoft Azure and CrowdStrike, including the ability to support cloud security initiatives and security operations.
• Have practical experience conducting and managing access reviews, including evaluating user permissions and identifying inappropriate or excessive access.
• Understand AI agents and the Model Context Protocol (MCP), including the security implications of agent permissions, enterprise data exposure, and integrations with external tools and systems.
• Bring hands-on experience with Claude, CrowdStrike, OX Security, Delinea, or comparable security and AI tools.
• Demonstrate the ability to manage technical security projects from initiation through completion with minimal oversight.
• Be proactive, responsive, and self-directed, with the ability to identify emerging security concerns and drive them toward resolution.
• Possess strong written and verbal communication skills, with the ability to explain security requirements, coordinate remediation efforts, and keep technical and nontechnical stakeholders informed.
• Be comfortable participating in a security on-call rotation and responding to operational security issues as required.

Benefits:

• Annual salary range of $65,920–$82,400 USD, with the stated target salary of $82,400 USD per year at the top of the range.
• Fully remote, work-from-anywhere arrangement.
• Unlimited paid time off.
• Comprehensive benefits package, including healthcare and other employee benefits.
• Employee wellness programs and employee resource groups.
• Progressive parental leave.
• Educational assistance and career development opportunities.
• Employee referral bonus program.
• Casual dress code and a collaborative, inclusive work environment.
• Opportunities to work on cloud security, AI governance, vulnerability management, and emerging security technologies.
• Supportive onboarding and opportunities for continued professional growth.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1