Senior Information Security Engineer

Jobtailor; Sandy (UT); On-site; USD 110,000 - 170,000; Full time

Job summary

Jobtailor is seeking an experienced Information Security professional to design and implement security controls across cloud, SaaS, and on‑prem environments.

You will partner with engineering to embed security into the software development lifecycle, lead vulnerability management, and drive secure coding practices across teams. A strong background in AWS and incident response is required.

Qualifications

• 5+ years in Information Security, Application Security or related field.
• Strong understanding of modern security principles, frameworks, and best practices.
• Experience securing cloud environments, particularly AWS.
• Experience implementing and managing identity and access management controls.
• Strong understanding of application security concepts including authentication, authorization, encryption, secure coding, and common attack vectors.
• Experience performing vulnerability assessments and remediation programs.
• Familiarity with security tools including vulnerability scanners, SIEM, and endpoint security.
• Experience integrating security controls into CI pipelines and development workflows.
• Strong scripting or automation skills with Python or Bash.
• Networking concepts: firewalls, VPNs, DNS, TLS, routing, network segmentation.
• Experience investigating and responding to security incidents.
• Strong communication skills and ability to collaborate across technical and non-technical teams.
• Proven track record leading technical initiatives and driving outcomes.

Responsibilities

• Design, implement, and maintain security controls across cloud, SaaS, and on‑prem environments.
• Partner with engineering teams to embed security into SDLC and CI processes.
• Lead vulnerability management activities including identification, prioritization, remediation tracking, and reporting.
• Conduct security assessments, threat modelling, and risk analysis for products and infrastructure.
• Develop and maintain security tooling, automation, and monitoring capabilities.
• Drive secure coding practices and guide engineering on security issues.
• Monitor, investigate, and respond to security incidents with remediation coordination.
• Implement and manage cloud security controls across AWS and Azure environments.
• Develop and maintain security policies, standards, and technical guidelines.
• Support compliance initiatives and security audits with technical expertise and evidence.
• Evaluate emerging threats and propose improvements to security architecture and processes.
• Contribute to security awareness and education across the organization.
• Mentor engineers to raise the overall security capability of the team.

Skills

Information Security

Application Security

Cloud Security

IAM

Secure Coding

Vulnerability Management

CI/CD Security

Python/Bash

Threat Modelling

Security Tools

Incident Response

Communication

Tools

SIEM

Endpoint Security

Vulnerability Scanners

IAM Tools

Networking Tools

Job description

Responsibilities

• Design, implement, and maintain security controls across cloud, SaaS, and on‑premises environments
• Partner with engineering teams to embed security into the software development lifecycle and CI processes
• Lead vulnerability management activities, including identification, prioritization, remediation tracking, and reporting
• Conduct security assessments, threat modelling, and risk analysis for products, infrastructure, and new initiatives
• Develop and maintain security tooling, automation, and monitoring capabilities
• Drive adoption of secure coding practices and provide guidance to engineering teams on security‑related issues
• Monitor, investigate, and respond to security incidents, coordinating remediation activities where required
• Implement and manage cloud security controls across AWS and Azure environments
• Develop and maintain security policies, standards, and technical security guidelines
• Support compliance initiatives and security audits by providing technical expertise and evidence
• Evaluate emerging threats and recommend improvements to security architecture and processes
• Contribute to security awareness and education initiatives across the organization
• Mentor engineers and help raise the overall security capability of the engineering organization

Requirements

• 5+ years of experience in Information Security, Application Security, Security Engineering, or a related field
• Strong understanding of modern security principles, frameworks, and best practices
• Experience securing cloud environments, particularly AWS
• Experience implementing and managing identity and access management controls
• Strong understanding of application security concepts including authentication, authorisation, encryption, secure coding practices, and common attack vectors
• Experience performing vulnerability assessments and managing remediation programs
• Familiarity with common security tools including vulnerability scanners, endpoint security solutions, SIEM platforms, and security monitoring tools
• Experience integrating security controls into CI pipelines and development workflows
• Strong scripting or automation skills using Python, Bash, or similar languages
• Understanding of networking concepts including firewalls, VPNs, DNS, TLS, routing, and network segmentation
• Experience investigating and responding to security incidents
• Strong communication skills with the ability to collaborate effectively across technical and non-technical teams
• Demonstrated ability to independently lead technical initiatives and drive outcomes