Security Engineer – ISO 27001 Lead & Cloud Defender

airlock; USA; Remote; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Direct collaboration with leadership

Early security impact across product

Small team with real customers

Zusammenfassung

airlock is seeking a hands-on Security Engineer to build and run security foundations for a growing software platform. You will work with leadership and an external compliance partner to drive certification readiness and respond clearly to customers and auditors.

In this first dedicated security engineering role, you will lead ISO 27001 preparation, review IAM/KMS controls, and coordinate an independent penetration test, tracking issues to resolution.

Qualifikationen

• Strong hands-on security engineering experience beyond compliance administration.
• Practical experience preparing for or working with ISO 27001.
• Strong AWS security knowledge, especially IAM and KMS.
• Familiarity with OAuth 2.0, OpenID Connect, and reading infrastructure-as-code.
• Ability to work independently and take ownership in a small team.

Aufgaben

• Lead ISO 27001 preparation, including a gap analysis, risk register, recurring controls, and internal audit.
• Review identity, authorization, tenant isolation, and key security assumptions; rank findings and guide remediation.
• Scope and coordinate an independent penetration test, then track critical issues through resolution.
• Triage security findings and monitor changes in security benchmark alignment.
• Maintain an answer library and support customer security questionnaires and selected calls, aiming for responses within five working days.
• As the platform develops, contribute to threat modeling and possible work on network controls, customer-managed keys, and further compliance readiness.

Kenntnisse

Security engineering

ISO 27001 experience

AWS IAM/KMS

OAuth 2.0 / OpenID Connect

Infrastructure as code awareness

Independent work

Jobbeschreibung

airlock is seeking a hands-on Security Engineer to build and run security foundations for a growing software platform. You will work with leadership and an external compliance partner to drive certification readiness and respond clearly to customers and auditors.

In this first dedicated security engineering role, you will lead ISO 27001 preparation, review IAM/KMS controls, and coordinate an independent penetration test, tracking issues to resolution.