Bitwerx, Inc.

Security Engineer

• Own end-to-end SOC 2 Type 2 execution
• Design, refine, and validate security controls
• Prepare audit evidence and remediation plans
• Author and maintain security policies and standards
• Maintain the risk register and treatment plans
• Manage vendor risk workflows
• Implement Azure security guardrails
• Enforce IAM, RBAC, MFA and conditional access
• Maintain the risk register and treatment plans
• Secure CI/CD pipelines and secrets
• Implement centralized logging and alerting
• Maintain Incident Response playbooks and lead response efforts
• Perform root cause analysis
• Manage tabletop exercises using real-world examples for team training
• Automate compliance evidence collection
• Ensure controls are sustainable year over year

Information Security Engineer