Information Security Engineer (IS Engr I)

Accountabilities

• Lead Azure cloud security engineering projects, including implementing and enabling security controls that strengthen infrastructure protection and support organizational security objectives.

• Represent the security function on the Cloud Architecture Review Board and Change Advisory Board, contributing security expertise to architecture decisions and planned system changes.

• Help develop a post-quantum cryptography readiness plan to prepare the organization for emerging cryptographic risks and future security requirements.

• Drive vulnerability identification, prioritization, and remediation in collaboration with development teams, using CrowdStrike, OX Security, or comparable tools to track issues through resolution.

• Participate in the security on-call rotation, investigating and triaging security events through CrowdStrike Falcon Complete and coordinating appropriate responses.

• Evaluate AI tools, integrations, and agents before deployment to identify security weaknesses, data exposure risks, and access-control concerns.

• Review and approve MCP servers according to the organization’s governance framework, ensuring that integrations and agent capabilities adhere to established security requirements.

• Support the AI Steering Committee by defining and communicating security requirements for AI initiatives, including appropriate controls for enterprise data access and agent permissions.

• Assess vendor requests, employee software requests, and third-party integrations, approving or rejecting them based on security risks and organizational risk tolerance.

• Conduct architecture, product, and engineering design risk reviews early in the software development lifecycle to identify and address potential security issues before deployment.

• Own quarterly access reviews for all users, helping ensure that permissions remain appropriate and aligned with security policies.

• Manage security initiatives independently, communicate progress and risks to relevant stakeholders, and follow through on identified issues until they are resolved.

Requirements:

• Have at least 5 years of experience in security engineering, cloud security, or a closely related information security discipline.

• Demonstrate hands-on experience with Microsoft Azure and CrowdStrike, including the ability to support cloud security initiatives and security operations.

• Have practical experience conducting and managing access reviews, including evaluating user permissions and identifying inappropriate or excessive access.

• Understand AI agents and the Model Context Protocol (MCP), including the security implications of agent permissions, enterprise data exposure, and integrations with external tools and systems.

• Bring hands-on experience with Claude, CrowdStrike, OX Security, Delinea, or comparable security and AI tools.

• Demonstrate the ability to manage technical security projects from initiation through completion with minimal oversight.

• Be proactive, responsive, and self-directed, with the ability to identify emerging security concerns and drive them toward resolution.

• Possess strong written and verbal communication skills, with the ability to explain security requirements, coordinate remediation efforts, and keep technical and nontechnical stakeholders informed.

• Be comfortable participating in a security on-call rotation and responding to operational security issues as required.

Benefits:

• Annual salary range of $65,920–$82,400 USD, with the stated target salary of $82,400 USD per year at the top of the range.

• Fully remote, work-from-anywhere arrangement.

• Unlimited paid time off.

• Comprehensive benefits package, including healthcare and other employee benefits.

• Employee wellness programs and employee resource groups.

• Progressive parental leave.

• Educational assistance and career development opportunities.

• Employee referral bonus program.

• Casual dress code and a collaborative, inclusive work environment.

• Opportunities to work on cloud security, AI governance, vulnerability management, and emerging security technologies.

• Supportive onboarding and opportunities for continued professional growth.