Information Security Engineer

Seeking a mid-level Information Security Engineer, this remote role will manage vulnerabilities across SaaS products and infrastructure, lead SOC 2 compliance efforts, and enhance security posture in Microsoft Azure while collaborating with cross-functional teams. Key responsibilities: Lead the company's SOC 2 compliance program, including readiness, control implementation, and coordination with auditors Oversee the vulnerability management program, including identification, triage, and remediation tracking across products and infrastructure Enhance the security posture of the Microsoft Azure environment through configuration hardening and continuous monitoring Required qualifications: 4-6 years of professional experience in information security, application security, or cloud security Experience preparing for SOC 2 Type 2 attestations for SaaS products Hands-on experience securing SaaS applications and workloads in Microsoft Azure Demonstrated experience with vulnerability management tooling and processes Working proficiency with Microsoft Intune, Microsoft Defender, Datadog, GitHub, and Snyk