Remote SaaS Security Engineer (SOC 2 Focus)

HSP Group; España; Presencial; EUR 55.000 - 85.000; Jornada completa

Descripción de la vacante

HSP Group is seeking a hands-on, mid-level Information Security Engineer for a remote role. You will protect our SaaS products, harden Azure environments, and mature the overall security program.

You will manage vulnerabilities across products and infrastructure, contribute to security policies, lead SOC 2 efforts, and engage with customers and vendors on security matters. Our stack runs in Microsoft Azure with Intune, Defender, and Purview, plus Datadog, GitHub, and Snyk.

Formación

• 4–6 years of professional information security experience.
• Experience preparing for SOC 2 Type 2 attestations for SaaS.
• Hands-on security for SaaS apps and Azure workloads.
• Experience with vulnerability management tooling and remediation coordination.
• Strong written and verbal communication to translate risk for engineers and non-technical stakeholders.

Responsabilidades

• Lead SOC 2 compliance readiness and auditor coordination.
• Manage vulnerability program across SaaS products, cloud infra, containers, and endpoints.
• Operate SAST, SCA, and dependency scanning tools and drive remediation with engineering.
• Monitor security telemetry and investigate alerts; drive containment actions.
• Report on vulnerability SLAs and MTTR to leadership.
• Collaborate with Engineering on secure SDLC and threat modeling.
• Contribute to security awareness and incident response playbooks.

Conocimientos

SOC 2 compliance

Vulnerability management

Cloud security

Secure SDLC

Communication

Herramientas

Microsoft Azure

Intune

Defender

Purview

Datadog

GitHub Advanced Security

Dependabot

Snyk

Descripción del empleo

HSP Group is seeking a hands-on, mid-level Information Security Engineer for a remote role. You will protect our SaaS products, harden Azure environments, and mature the overall security program.

You will manage vulnerabilities across products and infrastructure, contribute to security policies, lead SOC 2 efforts, and engage with customers and vendors on security matters. Our stack runs in Microsoft Azure with Intune, Defender, and Purview, plus Datadog, GitHub, and Snyk.