Information Security Engineer

The Phoenix Group®; New York (NY); A distancia; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Flexible PTO

Remote work options available

Professional development stipend

Descripción de la vacante

The Phoenix Group® is seeking an Information Security Engineer to guide clients through complex security programs and implement controls in cloud, endpoint, and identity environments.

You will lead SOC 2, ISO 27001, and NIST CSF audits, develop policies, manage Vanta/Drata/Secureframe, and harden posture across Google Workspace, Microsoft 365, AWS/Azure/GCP, with EDR/MDM deployment on Mac and Windows.

Formación

• 3 to 5+ years of experience in information security or IT with a focus on security operations and compliance.
• Proven experience leading full security audits using Vanta, Drata, or Secureframe.
• Hands-on administration of EDR and MDM tools.
• Strong IAM knowledge and cloud security practices for Google Workspace, Microsoft 365, and public clouds.
• Experience managing vulnerability programs, incident response, and security remediation.

Responsabilidades

• Lead clients through SOC 2, ISO 27001, and NIST CSF audits, including readiness assessments and evidence collection.
• Develop and maintain security policies aligned with NIST, GDPR, CCPA, and SEC regulations.
• Oversee compliance programs using automated tools like Vanta, Drata, Secureframe.
• Evaluate vendors and AI tools for security risks and optimize TPRM.
• Deploy, configure, and manage EDR and MDM across Mac and Windows.
• Harden security posture of cloud platforms such as Google Workspace and Microsoft 365.
• Monitor, triage, and respond to security alerts; lead incident response.
• Manage vulnerability scans, conduct pen testing, and administer SIEM tools.
• Conduct security awareness training and phishing simulations.
• Scope and lead security projects and document SOPs/Playbooks.

Conocimientos

Information security

Cybersecurity

Security operations

Compliance programs

Herramientas

SentinelOne

Jamf

Mosyle

Intune

Okta

Entra ID

MFA solutions

Google Workspace

Microsoft 365

AWS

Azure

GCP

Qualys

Nessus

Splunk

Elastic

Vanta

Drata

Secureframe

Descripción del empleo

• MDM Platforms: Jamf, Mosyle, Intune

Role Overview

As an Information Security Engineer, you will be responsible for guiding clients through complex security programs, managing compliance frameworks such as SOC 2 and ISO 27001, and directly implementing security controls in cloud, endpoint, and identity environments. You will serve as the technical authority on cybersecurity operations, vulnerability management, and security architecture, ensuring the protection of client assets and data integrity.

Key Responsibilities

• Lead clients through SOC 2, ISO 27001, and NIST CSF audits, including readiness assessments, remediation, and evidence collection
• Develop and maintain security policies aligned with industry standards such as NIST, GDPR, CCPA, and SEC regulations, covering incident response, access management, acceptable use, BCDR, and privacy
• Oversee internal compliance programs using automated tools like Vanta, and execute compliance roadmaps aligned with client growth and fundraising milestones
• Evaluate vendors and AI tools for security risks, maintain vendor inventories, risk tiers, and attestations, and optimize TPRM procedures
• Deploy, configure, and manage endpoint detection and response (EDR) solutions (SentinelOne), and mobile device management (MDM) platforms (Jamf, Mosyle, Intune) across Mac and Windows devices
• Strengthen identity and access management using Okta, Entra ID, MFA, and password managers such as 1Password
• Harden security posture of cloud-based platforms including Google Workspace, Microsoft 365, and major cloud providers, implementing best practices for SaaS and IaaS environments
• Monitor, triage, and respond to security alerts from endpoint, email, identity, and cloud sources; lead incident response and post-incident analysis
• Manage vulnerability scans, conduct pen testing, and administer SIEM tools; perform access reviews and configuration audits
• Conduct security awareness training, phishing simulations, and client security workshops to elevate security maturity
• Scope and lead security projects, manage timelines, and document standard operating procedures and Playbooks for operational consistency

Core Qualifications & Requirements

• 3 to 5+ years of experience in information security, cybersecurity, or IT with a focus on security operations and compliance
• Proven experience leading full security audits utilizing Vanta, Drata, or Secureframe platforms
• Hands-on administration of endpoint detection and response (EDR) and mobile device management (MDM) tools
• Strong knowledge of identity and access management systems (Okta, Entra ID) and cloud security practices for Google Workspace, Microsoft 365, and public cloud platforms
• Experience managing vulnerability programs, conducting incident response, and leading security remediation efforts
• Thorough understanding of SOC 2, ISO 27001, NIST CSF frameworks, and security policy development

Nice-to-Have Qualifications

• Security+, CISSP, CISA, or ISO 27001 Lead Implementer certifications
• Consulting, MSP, or security advisory background
• Experience with SEC Regulation S-P, SOX ITGC, IPO readiness, or governance frameworks
• Risk assessments for AI tools and scripting knowledge in Python, PowerShell, or Bash

Core Technical Skills

• EDR: SentinelOne, CrowdStrike, Carbon Black
• MDM Platforms: Jamf, Mosyle, Intune
• Identity & Access Management: Okta, Entra ID, MFA solutions
• Cloud Security: Google Workspace, Microsoft 365, AWS, Azure, GCP
• Security Frameworks: SOC 2, ISO 27001, NIST CSF
• Vulnerability Management & SIEM: Qualys, Nessus, Splunk, Elastic

Career Impact

This role provides the opportunity to shape and lead security initiatives for innovative technology companies, ensuring robust risk mitigation and compliance at scale while working within a fast-paced, evolving cybersecurity environment.

Compensation And Benefits

Salary range: Competitive based on experience, plus performance-based bonuses. Comprehensive health benefits, flexible PTO, professional development stipends, and remote work options available.