Remote Information Security Engineer - SOC 2 & Cloud Security

HSP Group; Northern (KY); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Remote work

Job summary

HSP Group is seeking a hands-on mid-level Information Security Engineer for a remote role. You will protect SaaS products, harden Azure and endpoints, and mature the security program.

You will lead SOC 2 efforts, manage vulnerabilities, and collaborate with Engineering, IT, Legal, and Product to improve security posture. Requirements include 4–6 years in information security, Azure security experience, and strong communication skills.

Qualifications

• 4–6 years of professional information security experience.
• Experience preparing for SOC 2 Type 2 attestations for SaaS.
• Hands-on security for SaaS workloads in Microsoft Azure.
• Experience with vulnerability management tooling and remediation.
• Familiarity with IAM concepts, especially Azure AD and conditional access.
• Experience writing security policies, standards, or procedures.
• Strong written and verbal communication for technical and non-technical audiences.

Responsibilities

• Lead SOC 2 readiness and audit coordination.
• Manage vulnerability program across SaaS products and cloud infra.
• Operate SAST, SCA and dependencies tooling and drive remediation.
• Monitor telemetry (Datadog) and investigate security alerts.
• Report security KPIs and drive improvements with leadership.
• Hardening of Azure identity, networking, data and workloads.
• Administer Microsoft Intune and Defender for endpoints.
• Draft and maintain security policies and procedures.
• Support vendor risk assessments and customer questionnaires.

Skills

SOC 2 readiness

Azure security

Vulnerability management

Identity & access management

Policy writing

Security audits

Communication

Tools

Datadog

GitHub Advanced Security

Dependabot

Snyk

Microsoft Defender

Microsoft Intune

Purview

Job description

HSP Group is seeking a hands-on mid-level Information Security Engineer for a remote role. You will protect SaaS products, harden Azure and endpoints, and mature the security program.

You will lead SOC 2 efforts, manage vulnerabilities, and collaborate with Engineering, IT, Legal, and Product to improve security posture. Requirements include 4–6 years in information security, Azure security experience, and strong communication skills.