Information Security Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee daily security for PeopleFinders’ applications, infrastructure, and internal systems.

• Lead comprehensive investigations of security alerts and incidents, which include scoping, evidence preservation, containment, root-cause analysis, corrective actions, and reporting.

• Collaborate with the managed detection and response provider, triage escalations, and ensure findings are tracked to closure.

• Maintain incident response procedures, runbooks, and practices for evidence handling.

• Evaluate newly disclosed vulnerabilities and supply-chain events across applications, containers, cloud, network devices, and endpoints.

• Execute vulnerability and external scanning programs, coordinate penetration tests, and monitor remediation efforts.

• Safeguard web applications and APIs through architecture design, authentication-flow, and code-change reviews.

• Spearhead bot mitigation efforts, scraping prevention, fraud-signal analysis, rate limiting, and traffic analysis.

• Evaluate and monitor third-party JavaScript, advertising, and tag-management content.

• Collaborate with developers on secure coding practices, OWASP risks, remediation, and CI/CD security checks.

• Secure AWS environments and containerized workloads.

• Assist in securing Snowflake, SQL Server, MongoDB, and data pipelines by implementing access control and protecting sensitive data.

• Manage firewall, VPN, remote-access, endpoint, device, identity, and access security measures.

• Uphold security policies and manage exception processes.

• Support SOC 2, PCI DSS, privacy obligations, vendor security reviews, audits, and the selection of security tools.

• Translate security risks into clear, understandable options for executives and engineering leaders.

• Document decisions and changes, enhance security awareness, and develop secure automation and AI-assisted tools.

⛳️ Requirements

• A minimum of 5 years in information security, with practical experience in at least three of the following areas: incident response, cloud security, application security, network security, and vulnerability management.

• Proven experience in leading security incidents from detection through to root cause analysis and reporting.

• Practical experience securing AWS and web applications and APIs that are publicly accessible; familiarity with OWASP risks is essential.

• Experience with firewalls, VPN/remote-access security, and endpoint protection (EDR/AV) along with device management.

• Proficient in WAF, bot management, DDoS protection, and CDN security.

• Strong skills in log analysis across firewall, application, cloud, and identity sources.

• Working knowledge of IAM, MFA, encryption, and secrets management.

• Experience in supporting SOC 2, PCI DSS, or comparable compliance programs.

• Proficient in scripting and API development (Python, PowerShell, or similar) for investigation and automation purposes.

• Exceptional written communication skills, including the ability to provide updates to executives.

• Ability to prioritize tasks based on business impact and likelihood, and to articulate that rationale.

• Must successfully pass a background check.

🏝️ Benefits

• Flexible PTO

• 6% 401K match

• 100% of medical, dental, and vision costs covered for the employee

• 75% of medical, dental, and vision costs covered for dependents