Information Security Engineer

About the Role

We are looking for an experienced and motivated Information Security Engineer to play a critical role in advancing the security strategy of a market-leading HR Tech SaaS company. You will help strengthen our security posture, respond to emerging threats, and proactively mitigate risks.

As the lead engineering resource within the InfoSec team, you will work closely with global stakeholders to deliver both proactive security initiatives and reactive incident response. This role is hands-on and requires a blend of technical expertise, problem-solving skills, and strong collaboration.

Key Responsibilities

• Monitor security event platforms, perform first-level incident triage and resolution, and participate in incident retrospectives.
• Own the vulnerability management program , including classification, tracking, remediation, documentation, and reporting.
• Evaluate, recommend, and implement new security tools from requirements gathering through production deployment.
• Provide proactive feedback to improve monitoring capabilities, tools, and processes.
• Create daily, weekly, and monthly reports for the Security Management Team.
• Maintain and update incident response runbooks, procedures, and playbooks .
• Contribute to playbook development using lessons learned and best practices.
• Stay current with emerging threats and security trends using public cyber resources (blogs, sites, podcasts).
• Participate in the on-call rotation to support 24 / 7 coverage.

Required Qualifications

Nice to Have

Skills Required

security architecture design, DevSecOps, Vulnerability Management, Security Controls, Cissp, Incident Response