Information Security Lead: Incident Response & Cloud

PeopleFinders, LLC; Oregon; Hybrid; USD 150,000 - 165,000; Full time

Benefits offered by this job

Flexible PTO

401K match

Medical coverage

Dependent coverage

Job summary

PeopleFinders, LLC is seeking an Information Security Lead to own day-to-day security across applications, infrastructure, and internal systems. You will drive incident response, assess threats, and translate findings into actionable remediation plans with engineering teams.

This hands-on role requires attacker mindset, collaboration, and clear communication to executives and engineers. You will help shape secure-by-design practices, CI/CD security checks, and risk-informed decisions across

Qualifications

• 5+ years in information security with hands-on experience across incident response, cloud security, app security, or network security.
• Proven ability to lead security incidents from detection through root cause and reporting.
• Hands-on experience securing AWS and internet-facing web apps and APIs; working knowledge of OWASP risks.
• Experience with firewalls, VPN/remote-access security, and EDR/AV endpoint protection.
• Experience with WAF, bot management, DDoS protection, and CDN security.
• Strong log analysis across firewall, cloud, and identity sources; IAM, MFA, and secrets management knowledge.

Responsibilities

• Lead investigations of security alerts and incidents end-to-end with scoping, evidence collection, containment, and remediation.
• Coordinate with MDR providers, triage escalations, and track findings to closure.
• Produce clear status updates and post-incident reports for leadership and engineering.
• Maintain incident response runbooks, procedures, and evidence-handling practices.
• Assess new vulnerabilities and supply-chain events within hours, separating real exposure from headlines.
• Run vulnerability scanning, coordinate pen tests, and track remediation within timelines.
• Protect web apps and APIs; review architecture, auth flows, and code changes for risk.

Skills

Incident response leadership

Cloud security

Application security

Network security

Vulnerability management

Threat intelligence

Scripting (Python/PowerShell)

Executive communication

RBAC/IAM/MFA

Secure coding mindset

Tools

Cloudflare

DataDome

AWS

Docker

Kubernetes

Job description

PeopleFinders, LLC is seeking an Information Security Lead to own day-to-day security across applications, infrastructure, and internal systems. You will drive incident response, assess threats, and translate findings into actionable remediation plans with engineering teams.

This hands-on role requires attacker mindset, collaboration, and clear communication to executives and engineers. You will help shape secure-by-design practices, CI/CD security checks, and risk-informed decisions across