Information Security Engineer

About Keyfactor

Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies take control of the cryptographic identities that safeguard every digital interaction. Behind the platform is a global team of people who care deeply about the work and each other. We move fast, think big, and show up for one another every day. If you're looking for work that matters and a team that brings out your best, we hope you'll trust your future with Keyfactor!

Title: Information Security Engineer

Location: USA; Remote ( Atlanta or Cleveland preferred)

Experience: Mid-Level

Job Function : Corporate IT

Employment Type : Full-Time

Industry: Computer & Network Security

About the position

We are seeking an experienced Information Security Engineer with a strong background in implementing and managing general information security frameworks, including ISO 27001:2022 and SOC 2 Type II. This role involves designing, maintaining, and improving our security infrastructure to ensure compliance with regulatory standards and support continuous monitoring efforts. The ideal candidate will play a key role in safeguarding the organization’s data and infrastructure while driving adherence to evolving security best practices.

Responsibilities

- Evaluate the security posture of systems, platforms, and cloud environments, establish appropriate security baselines, and drive implementation and hardening to close identified gaps.

- Quickly develop proficiency in new SIEM, EDR, and other security platforms as the environment evolves; configure, tune, and integrate these tools with SaaS applications and diverse data sources to expand visibility and detection coverage.

- Evaluate and optimize security playbooks, runbooks, and processes based on lessons learned, tooling changes, and evolving threats, ensuring documentation and workflows keep pace with the organization's security operations maturity.

- Experience conducting vulnerability assessments, system audits, and risk analysis using industry-standard scanning tools to support a proactive security posture.

- Manage and implement continuous monitoring processes to ensure the organization maintains compliance with a variety of information security frameworks, including ISO 27001:2022 and SOC 2 Type II. Experience with government compliance standards such as FedRAMP (NIST SP 800-53) and CMMC is preferred. This role focuses on ensuring robust security practices and adapting to evolving compliance requirements.

- Actively monitor, analyze, and respond to security alerts and incidents, performing investigations, incident handling, and recommending corrective actions.

Minimum Qualifications, Education, and Skills

- 5+ years of experience in information security or a similar role

- Proficiency in vulnerability scanning tools (Nessus, Burpsuite, Tenable, etc…) and interpreting scan results for remediation.

- Strong knowledge of security standards

- Demonstrated experience in continuous monitoring, network security, firewalls, VPNs, IDS/IPS, and endpoint protection.

- Strong analytical skills and a meticulous approach to problem-solving

- Demonstrated capability to deliver results on-time and to a defined schedule.

- Relevant certifications (e.g., CISSP, CompTIA Security+, CAP) are strongly preferred

- Familiarity with cloud security principles

- Experience with security automation and continuous monitoring tools

- PKI knowledge a plus

- Knowledge of scripting languages (Python, PowerShell) to automate security processes

- Experience with government-regulated environments (AWS GovCloud, Azure Government) preferred #LI-NA1

Compensation

Salary will be commensurate with experience. 

Culture, Career Opportunities and Benefits

We build teams that continually strive to get better than the day before. You will be challenged daily and given