Information Security Engineer

Hamilton Barnes; Charlotte (NC); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Flexible PTO

401(k) with employer match

Health, dental & vision insurance

Life insurance

Disability insurance

Paid parental leave

Job summary

Hamilton Barnes is seeking an Information Security Engineer to protect a fast-moving digital organization in Charlotte, NC. You will own incident response lifecycle, hunt for threats and tune detections across AWS, SaaS and enterprise environments, collaborating with engineering teams to remediate vulnerabilities.

This hands-on role requires strong security monitoring and cloud experience, with responsibilities spanning threat hunting, SIEM tuning and producing post-incident reports for

Qualifications

• 4+ years of hands-on experience in security monitoring or incident response.
• Experience reducing security risk across cloud, SaaS and on-prem environments.
• Strong AWS security implementation, monitoring and response techniques.
• Experience remediating vulnerabilities with engineering teams.

Responsibilities

• Identify, assess and reduce security risk across cloud and enterprise environments.
• Lead end-to-end incident response from triage to post-incident review.
• Proactively hunt threats on a defined cadence.
• Maintain and tune SIEM detection rules to improve fidelity.
• Remediate vulnerabilities in collaboration with engineering teams.
• Produce post-incident reports for technical and non-technical stakeholders.
• Participate in rotating on-call schedule.

Skills

Security monitoring

Incident response

Cloud security

AWS security

SIEM

Vulnerability management

Communication skills

Tools

SIEM

Endpoint protection

Vulnerability scanners

Job description

Job Title: Information Security Engineer

Location: Charlotte, NC

Salary: $100,000 - $150,000 Basic Salary Per Annum

The Role

As an Information Security Engineer, you will play a central role in protecting a large, fast-moving digital organization. You'll identify and reduce security risk across cloud, SaaS and enterprise environments, surfacing vulnerabilities, tuning detections and driving remediation alongside the engineering teams who own those systems. You'll also take full ownership of the incident response lifecycle, from initial alert triage through containment, eradication and post-incident review.

This is a hands-on, high-ownership position for someone who wants real influence over how security operates at scale. You'll work across complex cloud environments, proactively hunt for threats and help shape security operations that grow with the business.

Why Consider This Role

• High ownership: Take the lead on incident response, threat hunting, detection engineering and security risk reduction.
• Broad technical exposure: Work hands-on across AWS, SaaS, SIEM, endpoint security, vulnerability management and the wider enterprise security stack.
• Visible impact: Partner directly with Infrastructure and Engineering teams to strengthen security controls and drive meaningful remediation across the organization.

Key Responsibilities

• Identify, assess and reduce security risk across cloud, SaaS and enterprise environments
• Partner with engineering and development teams to remediate vulnerabilities across code, cloud and endpoints
• Lead incident response end to end, from triage through containment, eradication and post-incident review
• Conduct proactive, structured threat hunting on a defined cadence
• Maintain and tune SIEM detection rules to improve fidelity and coverage
• Contribute to security tooling evaluations and the broader security technology roadmap
• Produce post-incident reports and present findings to technical and non-technical stakeholders
• Participate in a shared, rotating on-call schedule

What You'll Bring

• 4+ years of hands-on experience in security monitoring, incident response, vulnerability management or cloud security
• Proven experience owning incidents through triage, containment, eradication and post-incident review
• Strong AWS security experience, including applying controls, monitoring and response techniques across environments at scale
• Hands-on experience with SIEM, endpoint protection and vulnerability scanning platforms in cloud environments
• Excellent written and verbal communication skills, with the ability to explain technical findings clearly to non-technical audiences

Nice to Have

• Threat intelligence experience and structured, hypothesis-driven threat hunting
• Identity and access management experience, including policy review, least-privilege enforcement and anomalous access detection
• SaaS security posture management, including controls around impossible travel, OAuth abuse and integration risk
• Understanding of Kubernetes security, container image scanning and CI/CD pipeline security
• Working knowledge of PCI DSS, SOC 2 and ISO 27001
• Familiarity with NIST CSF, MITRE ATT&CK and CIS Controls
• Scripting or automation of security workflows
• Experience using AI tools to accelerate detection and incident response
• Relevant certifications such as AWS Certified Security – Specialty or GIAC equivalents
• Health, dental and vision insurance
• Life insurance
• Short- and long-term disability insurance
• Flexible Spending Accounts
• 401(k) with employer match
• Flexible PTO, with 20 days annually for full-time employees, rising to 25 days after five years of service