Remote Information Security Engineer - Cloud & Compliance

Keyfactor; Cleveland (OH); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Second Fridays off

Paid parental leave

Wellbeing resources

Global volunteer day

Job summary

Keyfactor is seeking an experienced Information Security Engineer to design, implement, and manage security controls across on-premises and cloud environments. The role emphasizes ISO 27001:2022 and SOC 2 Type II compliance, with focus on vulnerability management, incident response, and security tooling integration.

The ideal candidate brings mid-level experience, strong scripting skills, and a proven track record with cloud security principles.

Qualifications

• 5+ years in information security or related role.
• Proficient with vulnerability scanning tools and remediation.
• Strong knowledge of security standards and controls.
• Experience with continuous monitoring, firewalls, VPNs and IDS/IPS.
• Certifications such as CISSP or Security+ are preferred.
• Familiarity with cloud security and regulated environments.

Responsibilities

• Evaluate security posture of systems, cloud environments, and baselines.
• Configure and integrate SIEM/EDR with SaaS data sources for visibility.
• Improve security playbooks and processes; document workflows.
• Conduct vulnerability assessments, audits, and risk analysis.
• Lead continuous monitoring to meet ISO 27001:2022 and SOC 2 Type II.
• Monitor, investigate, and respond to security incidents and alerts.

Skills

Vulnerability scanning

SIEM

EDR

Cloud security

Security automation

Python/PowerShell

Incident response

Network security

Compliance knowledge

Education

CISSP

CompTIA Security+

CAP

Security certifications

Tools

Nessus

Burp Suite

Tenable

Job description

Keyfactor is seeking an experienced Information Security Engineer to design, implement, and manage security controls across on-premises and cloud environments. The role emphasizes ISO 27001:2022 and SOC 2 Type II compliance, with focus on vulnerability management, incident response, and security tooling integration.

The ideal candidate brings mid-level experience, strong scripting skills, and a proven track record with cloud security principles.