Senior Information Security Specialist

Back to jobs
Senior Information Security Specialist
Remote, US

Apply

What we do:
Halcyon is the industry’s first dedicated, adaptive security platform that combines multiple proprietary advanced prevention engines along with AI models focused specifically on stopping ransomware.

Who we are:
Halcyon was formed in 2021 by a team of cyber industry veterans after battling the scourge of ransomware (and advanced threats) for years at some of the largest global security vendors. Comprised of leaders from Cylance (now Blackberry), Accuvant (now Optiv), Fireye and ISS X-Force (now IBM), Halcyon is focused on building products and solutions for mid-market and enterprise customers.

As a remote-native, completely distributed global team, we recognize great talent can exist anywhere. We invite you to apply to a job you’re interested in and we'll work a plan to meet your needs.

The Role:

Halcyon is seeking a seasoned and collaborative Senior Information Security Specialist to support the advancement of our cybersecurity and GRC (Governance, Risk, and Compliance) programs. In this role, you will play a critical part in strengthening our enterprise-wide security posture by coordinating across teams, managing third-party risk, supporting compliance initiatives, and maturing internal security processes and documentation. Your responsibilities will span operational security, risk assessment, policy development, and incident response preparedness.

Responsibilities:

- Perform and maintain third-party risk assessments and track vendor remediation activities.

- Support coordination and analysis of internal and external security testing, including vulnerability scans and penetration tests.

- Develop, track, and follow up on corrective action plans for identified security gaps or audit findings.

- Collaborate with managed security service providers and internal stakeholders to monitor and manage security events and escalations.

- Partner with engineering and operations teams to ensure implementation of security and compliance requirements across the organization.

- Assist in developing, maintaining, and communicating information security policies, standards, and procedures.

- Coordinate security incident response planning, disaster recovery testing, and business continuity exercises.

- Monitor and support enforcement of technical and administrative security controls across the enterprise.

- Stay current with evolving security and privacy regulations and frameworks (e.g., SOC 2, ISO 27001, TX-RAMP, FedRAMP).

Skills and Qualifications:

- 5+ years of experience in information security, GRC, or IT risk management.

- Strong understanding of cybersecurity concepts, controls, and risk frameworks.

- Demonstrated experience with third-party risk management processes and tooling.

- Proven ability to coordinate security testing and vulnerability management efforts.

- Excellent communication, documentation, and cross-functional collaboration skills.

- Ability to assess and implement technical and administrative controls across cloud and hybrid environments.

- Experience with regulatory compliance and audit support in fast-paced environments.

- Hands-on participation in incident response or disaster recovery exercises is a plus.

Bonus Skills and Qualifications:

- Experience with compliance platforms (e.g., Drata, Vanta).

- Knowledge of security frameworks beyond SOC 2 and ISO 27001, such as NIST 800-53 or CIS Controls.

- Familiarity with secure software development practices or DevSecOps principles.

- Background in auditing or supporting third-party security assessments.

- Experience with Microsoft 365 and/or Google Workspace security configuration.

- Exposure to regulatory environments such as HIPAA, GDPR, or CCPA.

- Certifications such as CISSP, CISA, CISM, Security+, or similar are a plus.

Benefits:

Halcyon offers the following benefits to eligible employees:

- Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents.

- Short and long-term disability coverage, basic life and AD&D insurance plans.

- Medical and dependent care FSA options.

- 401k plan with a generous employer contribution.

- Flexible PTO policy.

- Parental leave.

- Generous equity offerings.

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

The expected base salary range for this position is $120,000 - $160,000. Compensation varies based on a variety of factors which include (but are not limited to) role level, skills and competencies, qualifications, knowledge, location, and experience. In addition to base pay, certain roles are eligible to participate in our bonus or commission plans, as well as our benefits offers, and equity awards.

In accordance with applicable state and federal laws, the range provided is Halcyon’s reasonable estimate of the base compensation for this role. The actual amount may differ based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. Base pay is one part of the total package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and equity in the Company.

We understand it takes a diverse team of highly intelligent, passionate, curious, and creative people to develop the exceptional product we are building. Our dynamic team has incredible perspectives to share, just as we know you do, and we take great pride in being an equal opportunity employer.

Create a Job Alert

Interested in building your career at Halcyon? Get future opportunities sent straight to your email.
Create alert

Apply for this job

*

indicates a required field

Autofill my application

First Name *

Last Name *

Preferred First Name

Email *

Phone Country *

Phone *

Resume/CV *
Attach Attach

Dropbox
Google Drive
Enter manually Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter
Attach Attach

Dropbox
Google Drive
Enter manually Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Website

Will you now or in the future require visa sponsorship to work in United States? * Select...

If yes, please specify the type of sponsorship required (e.g., H-1B, OPT, etc.). *

Do you have hands on experience with Drata? * Select...

Do you have strong hands on experience with Splunk or similar SIEM? * Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.
Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring
process or thereafter. Any information that you do provide will be recorded and maintained in a
confidential file.

As set forth in Halcyon’s Equal Employment Opportunity policy,
we do not discriminate on the basis of any protected group status under any applicable law.

Gender Select...

Are you Hispanic/Latino? Select...

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.
As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure
the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories
is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status Select...

Submit application