InfoSec Lead: Incident Response & Cloud Security

PeopleFinders, LLC; United States; On-site; USD 150,000 - 165,000; Full time

Benefits offered by this job

Flexible PTO

401K match

Medical, dental, vision coverage

Dependent coverage

Job summary

PeopleFinders, LLC in the United States is seeking an Information Security Lead to own day-to-day security across applications, infrastructure, and internal systems, focusing on detection, response, and durable controls. You will lead incident response, translate threat intel into clear remediation plans, and collaborate with engineering to embed security into CI/CD, cloud, and data platforms.

The role requires hands-on security experience and strong communication with leadership, with a salary

Qualifications

• 5+ years in information security with hands-on experience in at least three areas.
• Experience leading security incidents from detection through root cause and reporting.
• Hands-on experience securing AWS and internet-facing web applications and APIs; knowledge of OWASP risks.
• Experience with firewalls and VPN/remote-access security; endpoint protection (EDR/AV).
• Experience with WAF, bot management, DDoS protection, and CDN security.
• Strong log analysis across multiple sources; IAM, MFA, encryption, and secrets management.

Responsibilities

• Lead investigations of security alerts and incidents end to end, including scope, evidence, containment, root-cause analysis, and remediation.
• Coordinate with the MDR provider, triage escalations, and track findings to closure.
• Write status updates and post-incident reports for leadership, engineering, and external parties.
• Maintain incident response procedures, runbooks, and evidence-handling practices.
• Assess newly disclosed vulnerabilities and supply-chain events against our environment, separating real exposure.
• Run vulnerability scanning and coordinate penetration tests, and track remediation.
• Review architecture, authentication flows, and code changes for security risk in applications and APIs.
• Lead bot mitigation, scraping prevention, fraud signals, rate limiting, and traffic analysis.
• Secure AWS environments, including identity, logging, threat detection, and configuration baselines, and container workloads.
• Manage network security, MFA, and remote access policies; enforce device management and coverage.
• Drive least-privilege access and secrets management; periodic access reviews.
• Support SOC 2, PCI DSS, privacy obligations with evidence and control improvements.

Skills

Incident response

Cloud security

Application security

Network security

Vulnerability management

Log analysis

IAM & encryption

Scripting (Python/PowerShell)

Security governance/compliance (SOC 2/

Executive communication

Education

Security certifications (CISSP, GIAC, AWS Security Specialty, PCNSE, or Security+)

Tools

AWS

Cloudflare

DataDome

EDR/AV

WAF

CI/CD security tools

Vulnerability scanners

Job description

PeopleFinders, LLC in the United States is seeking an Information Security Lead to own day-to-day security across applications, infrastructure, and internal systems, focusing on detection, response, and durable controls. You will lead incident response, translate threat intel into clear remediation plans, and collaborate with engineering to embed security into CI/CD, cloud, and data platforms.

The role requires hands-on security experience and strong communication with leadership, with a salary