Remote Information Security Engineer – ISO 27001 & SOC 2

United States Digital Space LLC; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

United States Digital Space LLC is seeking an experienced Information Security Engineer in the USA with the ability to design, maintain, and improve security infrastructure to comply with regulatory standards. The role focuses on implementing information security frameworks, including ISO 27001:2022 and SOC 2 Type II, while supporting continuous monitoring and threat response.

The ideal candidate will manage vulnerability assessments, cloud security, and security automation, working with tools

Qualifications

• 5+ years of information security experience.
• Proficiency with vulnerability scanning tools and interpreting results.
• Strong knowledge of security standards and frameworks.
• Experience with continuous monitoring, network security, firewalls, VPNs, IDS/IPS, endpoint protection.

Responsibilities

• Evaluate security posture of systems, cloud environments, and establish baselines.
• Integrate SIEM/EDR tools with SaaS apps and data sources for visibility.
• Improve security playbooks, runbooks and processes with evolving threats.
• Conduct vulnerability assessments, system audits, and risk analyses.
• Manage continuous monitoring to stay compliant with ISO 27001:2022 and SOC 2 Type II; FedRAMP (NIST SP 800-53) and CMMC preferred.
• Monitor, analyze, and respond to security alerts and incidents; perform investigations.

Skills

Vulnerability scanning

Security standards

Continuous monitoring

Cloud security

Scripting (Python)

Security incident response

PowerShell

Govt compliance

Tools

Nessus

BurpSuite

Tenable

Job description

United States Digital Space LLC is seeking an experienced Information Security Engineer in the USA with the ability to design, maintain, and improve security infrastructure to comply with regulatory standards. The role focuses on implementing information security frameworks, including ISO 27001:2022 and SOC 2 Type II, while supporting continuous monitoring and threat response.

The ideal candidate will manage vulnerability assessments, cloud security, and security automation, working with tools