Information Security Engineer

About This Opportunity

We are representing a confidential cybersecurity organization seeking an experienced Information Security Engineer to join their team. This is a remote position based in the USA, with preference for candidates near Atlanta or Cleveland.

Our client is looking for a mid-level professional with deep expertise in implementing and managing information security frameworks, including ISO 27001:2022 and SOC 2 Type II. You'll play a critical role in designing, maintaining, and continuously improving security infrastructure while ensuring compliance with regulatory standards and driving adherence to evolving security best practices.

Responsibilities

• Evaluate the security posture of systems, platforms, and cloud environments; establish security baselines and drive implementation and hardening to close identified gaps
• Quickly develop proficiency in new SIEM, EDR, and other security platforms as the environment evolves; configure, tune, and integrate these tools with SaaS applications and diverse data sources to expand visibility and detection coverage
• Evaluate and optimize security playbooks, runbooks, and processes based on lessons learned, tooling changes, and evolving threats, ensuring documentation and workflows keep pace with the organization's security operations maturity
• Conduct vulnerability assessments, system audits, and risk analysis using industry-standard scanning tools to support a proactive security posture
• Manage and implement continuous monitoring processes to ensure the organization maintains compliance with information security frameworks, including ISO 27001:2022 and SOC 2 Type II; experience with government compliance standards such as FedRAMP (NIST SP 800-53) and CMMC is preferred
• Actively monitor, analyze, and respond to security alerts and incidents, performing investigations, incident handling, and recommending corrective actions

What We're Looking For

• 5+ years of experience in information security or a similar role
• Proficiency in vulnerability scanning tools (Nessus, Burpsuite, Tenable, etc.) and interpreting scan results for remediation
• Strong knowledge of security standards and frameworks
• Demonstrated experience in continuous monitoring, network security, firewalls, VPNs, IDS/IPS, and endpoint protection
• Strong analytical skills and a meticulous approach to problem-solving
• Demonstrated capability to deliver results on-time and to a defined schedule
• Relevant certifications (e.g., CISSP, CompTIA Security+, CAP) are strongly preferred
• Familiarity with cloud security principles
• Experience with security automation and continuous monitoring tools
• PKI knowledge a plus
• Knowledge of scripting languages (Python, PowerShell) to automate security processes
• Experience with government-regulated environments (AWS GovCloud, Azure Government) preferred

How We Work With You

When you apply through Get A Job.ai, our talent team will review your qualifications and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. Please do not contact the client organization directly—all communication and coordination will flow through our recruiting team to ensure a smooth and professional process.

Pay

Compensation will be commensurate with experience and discussed during the interview process.

Equal Employment Opportunity: Get A Job.ai is committed to inclusive hiring practices and considers all qualified applicants regardless of race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic.