Senior InfoSec Engineer: Cloud Security & Incident Response

Wellabe; Des Moines (IA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid availability

Health insurance

401(k) with company match

Paid time off

Job summary

Wellabe is seeking an Information Security Engineer 3 to lead senior security design and operations across architecture, cloud, IAM, incident response, and data protection. The role partners with technology teams to reduce risk while enabling business objectives and provides mentorship in security best practices.

You will work with Microsoft Azure, Entra ID, Defender, and Sentinel to strengthen security posture, while aligning with governance, risk, and compliance requirements.

Qualifications

• Bachelor's degree in information security or related field.
• 7+ years of progressive information security experience.
• Strong knowledge of security architecture, cloud security, and risk management.
• Experience with security monitoring, incident response, and DevSecOps practices.

Responsibilities

• Architect, implement, maintain, and improve information security controls and baselines.
• Lead security reviews for systems, clouds, and integrations.
• Provide senior technical guidance to projects and stakeholders.
• Coordinate with MSPs and security operations partners for monitoring and response.
• Develop and maintain incident response procedures and playbooks.
• Drive vulnerability management and risk reduction initiatives.

Skills

Security Architecture

Cloud Security

Identity & Access mgmt

Monitoring & Detection

Incident Response

Vulnerability Management

DevSecOps

Data Protection

Automation

Governance & Compliance

Security Operations

Communication

Education

Bachelor's degree in information security

Tools

Microsoft Azure

Microsoft Entra ID

Microsoft 365 security

Microsoft Defender

Microsoft Sentinel

Job description

Wellabe is seeking an Information Security Engineer 3 to lead senior security design and operations across architecture, cloud, IAM, incident response, and data protection. The role partners with technology teams to reduce risk while enabling business objectives and provides mentorship in security best practices.

You will work with Microsoft Azure, Entra ID, Defender, and Sentinel to strengthen security posture, while aligning with governance, risk, and compliance requirements.