Information Security Engineer

Job Title: Information Security Engineer

Increase your chances of reaching the interview stage by reading the complete job description and applying promptly.
Location: Charlotte, NC
Salary: $100,000 – $150,000 Basic Salary Per Annum
The RoleAs an Information Security Engineer, you will play a central role in protecting a large, fast-moving digital organization. You’ll identify and reduce security risk across cloud, SaaS and enterprise environments, surfacing vulnerabilities, tuning detections and driving remediation alongside the engineering teams who own those systems. You’ll also take full ownership of the incident response lifecycle, from initial alert triage through containment, eradication and post-incident review.
This is a hands-on, high-ownership position for someone who wants real influence over how security operates at scale. You’ll work across complex cloud environments, proactively hunt for threats and help shape security operations that grow with the business.
Why Consider This RoleHigh ownership: Take the lead on incident response, threat hunting, detection engineering and security risk reduction.Broad technical exposure: Work hands-on across AWS, SaaS, SIEM, endpoint security, vulnerability management and the wider enterprise security stack.Visible impact: Partner directly with Infrastructure and Engineering teams to strengthen security controls and drive meaningful remediation across the organization.
Key ResponsibilitiesIdentify, assess and reduce security risk across cloud, SaaS and enterprise environmentsPartner with engineering and development teams to remediate vulnerabilities across code, cloud and endpointsLead incident response end to end, from triage through containment, eradication and post-incident reviewConduct proactive, structured threat hunting on a defined cadenceMaintain and tune SIEM detection rules to improve fidelity and coverageContribute to security tooling evaluations and the broader security technology roadmapProduce post-incident reports and present findings to technical and non-technical stakeholdersParticipate in a shared, rotating on-call schedule
What You’ll Bring4+ years of hands-on experience in security monitoring, incident response, vulnerability management or cloud securityProven experience owning incidents through triage, containment, eradication and post-incident reviewStrong AWS security experience, including applying controls, monitoring and response techniques across environments at scaleHands-on experience with SIEM, endpoint protection and vulnerability scanning platforms in cloud environmentsExcellent written and verbal communication skills, with the ability to explain technical findings clearly to non-technical audiences
Nice to HaveThreat intelligence experience and structured, hypothesis-driven threat huntingIdentity and access management experience, including policy review, least-privilege xzbcwsv enforcement and anomalous access detectionSaaS security posture management, including controls around impossible travel, OAuth abuse and integration riskUnderstanding of Kubernetes security, container image scanning and CI/CD pipeline securityWorking knowledge of PCI DSS, SOC 2 and ISO 27001Familiarity with NIST CSF, MITRE ATT&CK and CIS ControlsScripting or automation of security workflowsExperience using AI tools to accelerate detection and incident responseRelevant certifications such as AWS Certified Security – Specialty or GIAC equivalents
BenefitsHealth, dental and vision insuranceLife insuranceShort- and long-term disability insuranceFlexible Spending Accounts401(k) with employer matchFlexible PTO, with 20 days annually for full-time employees, rising to 25 days after five years of servicePaid holidaysPaid parental bonding benefitEmployee Assistance Program