Information Security Specialist

AI Digital; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote

31 days PTO: 21 days annual leave + 10

Growth-focused environment

Team events

Culture of trust

Job summary

AI Digital is seeking an Information Security Specialist to own day-to-day security operations across endpoints, access management, vulnerability handling, and incident response. You’ll work directly with the Head of Security to monitor MDM/EDR, manage Google Workspace security, and drive phishing awareness for the organization.

The role requires hands-on security experience with SaaS platforms, familiarity with MDM/EDR, and the ability to build processes where needed.

Qualifications

• 2–4 years in information security or a related field (IT, DevOps with a security focus).
• Hands-on experience with SaaS platforms from a security/administration perspective.
• Understanding of access management, vulnerability management, endpoint protection, and event monitoring.

Responsibilities

• Monitor MDM and EDR coverage: device inventory, policy compliance, gap identification, escalation to IT Ops.
• Triage EDR alerts: initial assessment, isolation where needed, escalation.
• Monitor inactive and privileged accounts across Google Workspace and key SaaS platforms.
• Vulnerability Management.
• Assist with endpoint patching; notify IT Ops and DevOps on critical CVEs.
• Monitor baseline security alerts in Google Workspace and EDR; assist with event triage, escalation by severity, and log maintenance.
• Review phishing reports and manage blocking policies in Google Workspace.
• Administer KnowBe4: training modules, phishing simulations, department-level metrics.
• Support security incident handling from the security team side: escalation, timeline tracking, incident log.
• Participate in the SOC 2 certification process.
• Help prepare responses to security sections of questionnaires from current and prospective clients.

Skills

InfoSec experience

SaaS security

MDM

EDR

Access management

Vulnerability management

Endpoint protection

Cross-functional coordination

Process development

Job description

AI Digital is looking for an Information Security Specialist to take on a core operational role within our growing security team. Reporting directly to the Head of Security, you will take ownership of day-to-day execution across key operational domains—including endpoint protection, access management, vulnerability management, event monitoring, incident response, email security and employee awareness programs.

Responsibilities

• Monitor MDM and EDR coverage: device inventory, policy compliance, gap identification, escalation to IT Ops.
• Triage EDR alerts: initial assessment, isolation where needed, escalation.
• Monitor inactive and privileged accounts across Google Workspace and key SaaS platforms.
• Vulnerability Management.
• Assist with endpoint patching; notify IT Ops and DevOps on critical CVEs.
• Monitor baseline security alerts in Google Workspace and EDR; assist with event triage, escalation by severity, and log maintenance.
• Review phishing reports (analysis, email isolation, user notification) and manage blocking policies in Google Workspace.
• Administer KnowBe4: training modules, phishing simulations, department-level metrics.
• Support security incident handling from the security team side: escalation, timeline tracking, incident log.
• Participate in the SOC 2 certification process.
• Help prepare responses to security sections of questionnaires from current and prospective clients.

What You Bring

Must-have

• 2–4 years in information security or a related field (IT, DevOps with a security focus).
• Hands-on experience working with SaaS platforms from a security or administration perspective.
• Understanding of core concepts: access management, vulnerability management, endpoint protection, event monitoring.
• Experience with MDM solutions.
• Experience with EDR.
• Ability to take on a task without a defined process and drive it to completion.
• Some processes will need to be built from scratch — we'll support you through that.
• Comfortable coordinating with cross-functional teams: setting requirements, following up on execution.

Nice-to-have

• Google Workspace administration.
• Security awareness platforms (KnowBe4 or equivalent).
• Involvement in a SOC 2 or ISO 27001 certification process.
• Familiarity with CIS Controls or NIST CSF.
• Experience with process automation (scripting, API integrations, no-code/low-code tools).

What You Get

• USD compensation that values your expertise.
• Work from anywhere: fully remote to suit your lifestyle.
• 31 days of paid time off: 21 days of annual leave + 10 days of sick leave, because your health and work-life balance matter.
• Growth-focused environment: access to learning resources and clear pathways for growth.
• Fun team events: virtual cooking classes, yoga sessions, team quizzes and more
• A culture of trust: we cut the red tape — results over rules always. Open talk, ownership, and getting things done together.

Hiring Flow

• Screening Interview (45 minutes): Initial conversation with a recruiter.
• Technical Interview (up to 60 minutes): A deep dive into your functional expertise, problem-solving approach, and practical skills relevant to the role.
• Offer: If successful, you’ll receive an offer to join our team.