Information Security Engineer (IS Engr I)

jobgether; New York (NY); Remote; USD 66,000 - 82,000; Full time

Benefits offered by this job

Remote work

Unlimited PTO

Healthcare benefits

Career development

Parental leave

Educational assistance

Employee referral bonus

Job summary

jobgether is seeking an Information Security Engineer (IS Engr I) in the United States for a fully remote role. You will lead Azure security initiatives, remediate vulnerabilities with developers, and oversee AI tool safety and MCP governance.

The position emphasizes independent project management and effective cross-team communication. Responsibilities include security reviews, vendor risk assessments, on-call response, and defining security requirements for AI initiatives across the

Qualifications

• 5+ years in security engineering or cloud security.
• H hands-on Azure and CrowdStrike experience.
• Experience conducting access reviews and managing permissions.
• Familiarity with AI tools, agents, and MCP security implications.
• Ability to drive security projects with minimal supervision.
• Strong written and verbal communication with diverse stakeholders.

Responsibilities

• Lead Azure cloud security projects and implement security controls.
• Represent security on architecture and change boards.
• Develop a post-quantum cryptography readiness plan.
• Drive vulnerability management with remediation collaboration.
• Participate in security on-call rotation and triage events.
• Evaluate AI tools and MCP integrations for security risks.
• Review MCP servers per governance framework.
• Support AI Steering Committee with security requirements.
• Assess vendor and third-party risk during development lifecycle.
• Conduct design risk reviews early in SDLC.
• Own quarterly access reviews for all users.
• Manage security initiatives and communicate progress.

Skills

Microsoft Azure

CrowdStrike

Access reviews

AI security

MCP security

Security project management

Tools

Delinea

OX Security

Claude

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Engineer (IS Engr I) based in United States.

The Information Security Engineer will help advance enterprise security initiatives across cloud infrastructure, vulnerability management, AI security, and risk governance. You will lead Azure security projects, work directly with development teams to remediate vulnerabilities, and help ensure that emerging AI tools and integrations meet established security standards. The role also involves evaluating AI agents and Model Context Protocol (MCP) servers, conducting access reviews, and assessing vendor and application risks early in the development lifecycle. You will collaborate with cloud architects, engineers, and security stakeholders to implement controls and strengthen the organization’s overall security posture. This opportunity is well suited to an independent, proactive security professional who can manage projects with minimal supervision and communicate effectively across teams. The position is fully remote and offers the opportunity to contribute to evolving security practices, including post-quantum cryptography readiness.

Accountabilities

• Lead Azure cloud security engineering projects, including implementing and enabling security controls that strengthen infrastructure protection and support organizational security objectives.
• Represent the security function on the Cloud Architecture Review Board and Change Advisory Board, contributing security expertise to architecture decisions and planned system changes.
• Help develop a post-quantum cryptography readiness plan to prepare the organization for emerging cryptographic risks and future security requirements.
• Drive vulnerability identification, prioritization, and remediation in collaboration with development teams, using CrowdStrike, OX Security, or comparable tools to track issues through resolution.
• Participate in the security on-call rotation, investigating and triaging security events through CrowdStrike Falcon Complete and coordinating appropriate responses.
• Evaluate AI tools, integrations, and agents before deployment to identify security weaknesses, data exposure risks, and access-control concerns.
• Review and approve MCP servers according to the organization’s governance framework, ensuring that integrations and agent capabilities adhere to established security requirements.
• Support the AI Steering Committee by defining and communicating security requirements for AI initiatives, including appropriate controls for enterprise data access and agent permissions.
• Assess vendor requests, employee software requests, and third-party integrations, approving or rejecting them based on security risks and organizational risk tolerance.
• Conduct architecture, product, and engineering design risk reviews early in the software development lifecycle to identify and address potential security issues before deployment.
• Own quarterly access reviews for all users, helping ensure that permissions remain appropriate and aligned with security policies.
• Manage security initiatives independently, communicate progress and risks to relevant stakeholders, and follow through on identified issues until they are resolved.

Requirements

• Have at least 5 years of experience in security engineering, cloud security, or a closely related information security discipline.
• Demonstrate hands-on experience with Microsoft Azure and CrowdStrike, including the ability to support cloud security initiatives and security operations.
• Have practical experience conducting and managing access reviews, including evaluating user permissions and identifying inappropriate or excessive access.
• Understand AI agents and the Model Context Protocol (MCP), including the security implications of agent permissions, enterprise data exposure, and integrations with external tools and systems.
• Bring hands-on experience with Claude, CrowdStrike, OX Security, Delinea, or comparable security and AI tools.
• Demonstrate the ability to manage technical security projects from initiation through completion with minimal oversight.
• Be proactive, responsive, and self-directed, with the ability to identify emerging security concerns and drive them toward resolution.
• Possess strong written and verbal communication skills, with the ability to explain security requirements, coordinate remediation efforts, and keep technical and nontechnical stakeholders informed.
• Be comfortable participating in a security on-call rotation and responding to operational security issues as required.

Benefits

• Annual salary range of $65,920-$82,400 USD, with the stated target salary of $82,400 USD per year at the top of the range.
• Fully remote, work-from-anywhere arrangement.
• Unlimited paid time off.
• Comprehensive benefits package, including healthcare and other employee benefits.
• Employee wellness programs and employee resource groups.
• Progressive parental leave.
• Educational assistance and career development opportunities.
• Employee referral bonus program.
• Casual dress code and a collaborative, inclusive work environment.
• Opportunities to work on cloud security, AI governance, vulnerability management, and emerging security technologies.
• Supportive onboarding and opportunities for continued professional growth.