信息安全工程师
Information Security Engineer
关于 Keyfactor
我们的使命是安全地连接世界：人类、机器和人工智能。Keyfactor 是 AI 和机器信任基础设施的领导者，帮助世界上最大的企业及政府机构掌控保障每次数字交互的加密身份。平台背后是一支全球团队，他们对工作和彼此都充满热情。我们行动迅速，思考宏大，每天都会互相支持。如果你正在寻找一份有意义的工作和一个能激发你最佳状态的团队，我们希望你能将未来托付给 Keyfactor！
职位名称：信息安全工程师
地点：美国；远程（优先亚特兰大或克利夫兰）
经验：中级
职位类别：企业 IT
雇佣类型：全职
行业：计算机与网络安全
职位简介
我们正在寻找一位经验丰富的信息安全工程师，具备在实施和管理通用信息安全框架方面的扎实背景，包括 ISO 27001:2022 和 SOC 2 Type II。该职位涉及设计、维护和改进我们的安全基础设施，以确保符合监管标准并支持持续监控工作。理想的候选人将在保护组织的数据和基础设施方面发挥关键作用，同时推动遵循不断演进的安全最佳实践。
职责
- 评估系统、平台和云环境的安全状况，建立适当的安全基线，并推动实施和加固以填补已识别的差距。
- 快速掌握新的 SIEM、EDR 和其他安全平台，随着环境的变化进行配置、调优和集成，将这些工具与 SaaS 应用程序和多样化的数据源结合，扩大可见性和检测范围。
- 根据经验教训、工具变化和不断演变的威胁，评估和优化安全剧本、操作手册和流程，确保文档和工作流与组织的安全运营成熟度同步发展。
- 具备使用行业标准扫描工具进行漏洞评估、系统审计和风险分析的经验，以支持主动安全策略。
- 管理和实施持续监控流程，确保组织保持对多种信息安全框架（包括 ISO 27001:2022 和 SOC 2 Type II）的合规性。具备政府合规标准（如 FedRAMP（NIST SP 800-53））的经验。
查看英文原文
About Keyfactor
Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies take control of the cryptographic identities that safeguard every digital interaction. Behind the platform is a global team of people who care deeply about the work and each other. We move fast, think big, and show up for one another every day. If you're looking for work that matters and a team that brings out your best, we hope you'll trust your future with Keyfactor!
Title: Information Security Engineer
Location: United States; Remote (Atlanta or Cleveland preferred)
Experience: Mid-Level
Job Function: Corporate IT
Employment Type: Full-Time
Industry: Computer & Network Security
About the position
We are seeking an experienced Information Security Engineer with a strong background in implementing and managing general information security frameworks, including ISO 27001:2022 and SOC 2 Type II. This role involves designing, maintaining, and improving our security infrastructure to ensure compliance with regulatory standards and support continuous monitoring efforts. The ideal candidate will play a key role in safeguarding the organization’s data and infrastructure while driving adherence to evolving security best practices.
Responsibilities
- Evaluate the security posture of systems, platforms, and cloud environments, establish appropriate security baselines, and drive implementation and hardening to close identified gaps.
- Quickly develop proficiency in new SIEM, EDR, and other security platforms as the environment evolves; configure, tune, and integrate these tools with SaaS applications and diverse data sources to expand visibility and detection coverage.
- Evaluate and optimize security playbooks, runbooks, and processes based on lessons learned, tooling changes, and evolving threats, ensuring documentation and workflows keep pace with the organization's security operations maturity.
- Experience conducting vulnerability assessments, system audits, and risk analysis using industry-standard scanning tools to support a proactive security posture.
- Manage and implement continuous monitoring processes to ensure the organization maintains compliance with a variety of information security frameworks, including ISO 27001:2022 and SOC 2 Type II. Experience with government compliance standards such as FedRAMP (NIST SP 800-53) and CMMC is preferred. This role focuses on ensuring robust security practices and adapting to evolving compliance requirements.
- Actively monitor, analyze, and respond to security alerts and incidents, performing investigations, incident handling, and recommending corrective actions.
Minimum Qualifications, Education, and Skills
- 5+ years of experience in information security or a similar role
- Proficiency in vulnerability scanning tools (Nessus, Burpsuite, Tenable, etc…) and interpreting scan results for remediation.
- Strong knowledge of security standards
- Demonstrated experience in continuous monitoring, network security, firewalls, VPNs, IDS/IPS, and endpoint protection.
- Strong analytical skills and a meticulous approach to problem-solving
- Demonstrated capability to deliver results on-time and to a defined schedule.
- Relevant certifications (e.g., CISSP, CompTIA Security+, CAP) are strongly preferred
- Familiarity with cloud security principles
- Experience with security automation and continuous monitoring tools
- PKI knowledge a plus
- Knowledge of scripting languages (Python, PowerShell) to automate security processes
- Experience with government-regulated environments (AWS GovCloud, Azure Government) preferred #LI-NA1
Compensation
Salary will be commensurate with experience.
Culture, Career Opportunities and Benefits
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas.
Here are just some of the initiatives that make our culture special:
- Second Fridays (a company-wide day off on the second Friday of every month minus November and December due to the Holiday schedule). Please note that this benefit is subject to change.
- Comprehensive benefit coverage globally.
- Paid Parental Leave is available to new parents. Structure varies based on regional/government requirements. In regions where government-paid leave doesn’t exist, like in the U.S., the company offers generous paid parental leave, along with comprehensive adoption and fertility support.
- Competitive time off globally.
- Dedicated employee-focused ambassadors via Key Contributors & Culture Committees.
- DIVERSE Commitment, a call to action for a more inclusive and diverse future in business, society, and technology.
- The Keyfactor Alliance Program to support DEIB efforts.
- Wellbeing resources, wellness allowance, mindfulness app free membership, Wellness Wednesdays.
- Global Volunteer Day, company non-profit matching, and 3 volunteer days off.
- Monthly Talent development and Cross Functional meetings to support professional development.
- Regular All Hands meetings – followed by group gatherings.
Our Core Values
Our core values are extremely important to how we run our business and what we look for in every team member:
Trust is paramount.
We deliver security software and solutions where trust and openness are of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.
Customers are core.
We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.
Innovation never stops, it only accelerates.
The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.
We deliver with agility.
We thrive in high-paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.
United by respect.
Respect for all is what unites us. We promote diversity, inclusivity, equity, and acting with empathy and openness, both in our business and in our communities.
Teams make “it” happen.
Vision and goals are not individually achievable – they require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.
Keyfactor is a proud equal opportunity employer including but not limited to veterans and individuals with disabilities.
REASONABLE ACCOMMODATION: Applicants with disabilities may contact a member of Keyfactor’s People team via people@keyfactor.com and/or telephone at 1.216.785.2990 to request and arrange for accommodations at any time.
Keyfactor Privacy Notice