Remote Information Security Engineer: SOC2 & Azure Security

HSP Group; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

HSP Group is a remote-friendly Information Security Engineer role focused on protecting our SaaS products and maturing the security program. You will work across governance, engineering, legal, and product teams to drive measurable security improvements in our Azure-based stack.

The ideal candidate has 4–6 years of information security experience, hands-on vulnerability management, and familiarity with SOC 2 Type 2 attestations.

Qualifications

• 4–6 years of professional experience in information security, application security, cloud security, or a closely related role.
• Experience in preparing for SOC 2 Type 2 attestations for SaaS products.
• Hands-on experience securing SaaS applications and workloads running in Microsoft Azure.

Responsibilities

• Lead the company’s SOC 2 compliance program, including readiness, control implementation, evidence collection, ongoing monitoring, remediation, and coordination with auditors through successful completion of the audit.
• Lead the vulnerability management program across our SaaS products, cloud infrastructure, containers, and endpoints including identification, triage, prioritization, remediation tracking, and reporting.
• Operate and tune SAST, SCA, and dependency-scanning tooling (e.g., Snyk, GitHub Advanced Security/Dependabot) and partner with engineering teams to drive timely remediation.
• Monitor runtime and infrastructure telemetry (e.g., Datadog) for security signals; investigate alerts and lead containment and follow‑up actions.
• Track and report on vulnerability SLAs, mean-time-to-remediate, and other security KPIs to leadership.

Skills

SOC 2

Vulnerability mgmt

Azure security

SAST

SCA

Datadog

GitHub Advanced Security

Snyk

Intune

Defender

Purview

Entra ID

IAM concepts

Secure SDLC

Incident response

Tools

Datadog

GitHub Advanced Security

Dependabot

Code scanning

Defender

Purview

Job description

HSP Group is a remote-friendly Information Security Engineer role focused on protecting our SaaS products and maturing the security program. You will work across governance, engineering, legal, and product teams to drive measurable security improvements in our Azure-based stack.

The ideal candidate has 4–6 years of information security experience, hands-on vulnerability management, and familiarity with SOC 2 Type 2 attestations.