Info Sec Staff Engineer
One Identity
full-time
Posted on:
Location Type: Remote
Location: United States
Visit company websiteExplore more
Job Level
About the role
- Support the implementation, operation, and maintenance of cloud and infrastructure security controls across Azure‑centric environments, with exposure to AWS.
- Monitor security alerts and logs, perform initial investigation and triage, and escalate incidents as appropriate.
- Participate in security incident response activities, including containment, remediation, and post‑incident reviews under guidance from senior team members.
- Operate and maintain security tooling, including SIEM, cloud‑native security services, endpoint protection, and vulnerability scanning tools.
- Assist with detection engineering by maintaining and tuning alerts to improve visibility and reduce false positives.
- Support vulnerability management processes, including scanning, validation, remediation tracking, and re‑testing.
- Collaborate with engineering and platform teams to implement secure configurations and infrastructure hardening best practices.
- Support compliance and audit activities related to SOC 1, SOC 2, ISO 27001, 27017, and 27018, including evidence collection and control verification.
- Develop and maintain security documentation, including procedures, runbooks, and operational guides.
- Participate in continuous improvement initiatives to enhance security operations efficiency and effectiveness.
- Stay current on security threats, vulnerabilities, and cloud security best practices, applying learnings to day‑to‑day work.
Requirements
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related technical field, or equivalent practical experience.
- 5+ years of experience in information security, security operations, cloud infrastructure, or related technical roles.
- Hands-on experience with Azure cloud environments.
- Familiarity with security operations concepts, including alert monitoring, incident response, and vulnerability management.
- Basic understanding of network security, identity and access management, and infrastructure hardening principles.
- Exposure to AWS environments or cloud-security fundamentals is a plus.
- Experience supporting or working within regulated environments (SOC, ISO, or similar) preferred.
- Comfort working in Linux or Windows environments, with introductory scripting or automation experience (PowerShell, Bash, Python, or similar).
- Strong analytical mindset and eagerness to learn and grow in security engineering and operations.
- Good written and verbal communication skills and the ability to collaborate effectively with technical teams.
Benefits
- Health insurance
- Flexible working hours
- Professional development programs
- Health and wellness initiatives
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
cloud securityvulnerability managementincident responsealert monitoringsecurity documentationinfrastructure hardeningscriptingAzureAWSnetwork security
Soft Skills
analytical mindseteagerness to learnwritten communicationverbal communicationcollaboration
Certifications
SOC 1SOC 2ISO 27001ISO 27017ISO 27018