Note: The job is a remote job and is open to candidates in USA. Keyfactor is a provider of trust infrastructure for AI and machines, helping enterprises and government agencies protect digital interactions through cryptographic identities. The Information Security Engineer will implement, manage, and improve security infrastructure, frameworks, and continuous monitoring processes while evaluating security posture, configuring security tools, and responding to incidents.
Responsibilities
- Evaluate the security posture of systems, platforms, and cloud environments, establish appropriate security baselines, and drive implementation and hardening to close identified gaps
- Quickly develop proficiency in new SIEM, EDR, and other security platforms as the environment evolves; configure, tune, and integrate these tools with SaaS applications and diverse data sources to expand visibility and detection coverage
- Evaluate and optimize security playbooks, runbooks, and processes based on lessons learned, tooling changes, and evolving threats, ensuring documentation and workflows keep pace with the organization's security operations maturity
- Experience conducting vulnerability assessments, system audits, and risk analysis using industry-standard scanning tools to support a proactive security posture
- Manage and implement continuous monitoring processes to ensure the organization maintains compliance with a variety of information security frameworks, including ISO 27001:2022 and SOC 2 Type II. Experience with government compliance standards such as FedRAMP (NIST SP 800-53) and CMMC is preferred. This role focuses on ensuring robust security practices and adapting to evolving compliance requirements
- Actively monitor, analyze, and respond to security alerts and incidents, performing investigations, incident handling, and recommending corrective actions
Skills
- 5+ years of experience in information security or a similar role
- Proficiency in vulnerability scanning tools (Nessus, Burpsuite, Tenable, etc…) and interpreting scan results for remediation
- Strong knowledge of security standards
- Demonstrated experience in continuous monitoring, network security, firewalls, VPNs, IDS/IPS, and endpoint protection
- Strong analytical skills and a meticulous approach to problem-solving
- Demonstrated capability to deliver results on-time and to a defined schedule
- Familiarity with cloud security principles
- Experience with security automation and continuous monitoring tools
- PKI knowledge a plus
- Knowledge of scripting languages (Python, PowerShell) to automate security processes
- Relevant certifications (e.g., CISSP, CompTIA Security+, CAP) are strongly preferred
- Experience with government-regulated environments (AWS GovCloud, Azure Government) preferred
Benefits
- Remote work in the USA, with Atlanta or Cleveland preferred.
- Second Fridays: a company-wide day off on the second Friday of every month, except November and December due to the holiday schedule; this benefit is subject to change.
- Comprehensive benefit coverage globally.
- Paid parental leave for new parents; structure varies based on regional/government requirements. In regions where government-paid leave does not exist, like the U.S., the company offers generous paid parental leave, along with comprehensive adoption and fertility support.
- Competitive time off globally.
- Dedicated employee-focused ambassadors via Key Contributors & Culture Committees.
- The Keyfactor Alliance Program to support DEIB efforts.
- Wellbeing resources, wellness allowance, mindfulness app free membership, and Wellness Wednesdays.
- Global Volunteer Day, company non-profit matching, and 3 volunteer days off.
- Monthly Talent Development and Cross Functional meetings to support professional development.
- Regular All Hands meetings followed by group gatherings.
Company Overview
Company H1B Sponsorship