Information Security Engineer - Keyfactor, Inc.

About Keyfactor

Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies take control of the cryptographic identities that safeguard every digital interaction. Behind the platform is a global team of people who care deeply about the work and each other. We move fast, think big, and show up for one another every day. If you're looking for work that matters and a team that brings out your best, we hope you'll trust your future with Keyfactor!

Title: Information Security Engineer

Location: United States; Remote

Experience: Mid-Level

Job Function: IT Compliance

Employment Type: Full-Time

Industry: Computer Network & Security

Job Summary

The Information Security Engineer is responsible for executing and advancing the organization’s security operations, risk management practices, and compliance programs. This role focuses on strengthening security controls, leading incident response activities, managing vulnerability remediation efforts, and ensuring sustained compliance with frameworks such as ISO 27001:2022 and SOC 2 Type II. The role operates with increased independence, drives improvements to security tooling and processes, and partners cross-functionally to embed secure practices into infrastructure and engineering workflows. Work at this level includes ownership of defined security domains and contributing to the ongoing maturity of the organization’s overall security posture.

Applicants must be legally authorized to work in the United States.

Job Responsibilities

• Experience conducting vulnerability assessments, system audits, and risk analysis using industry-standard scanning tools (e.g., Nessus, Azure security tools, Tenable, Burpsuite, etc…) to support a proactive security posture.
• Manage and implement continuous monitoring processes to ensure the organization maintains compliance with a variety of information security frameworks, including ISO 27001:2022 and SOC 2 Type II. Experience with government compliance standards such as FedRAMP (NIST SP 800-53) and CMMC is preferred. This role focuses on ensuring robust security practices and adapting to evolving compliance requirements.
• Collaborate closely with IT, DevOps, Engineering, and Compliance teams to enforce security policies, procedures, and best practices.
• Actively monitor, analyze, and respond to security alerts and incidents, performing investigations, incident handling, and recommending corrective actions.
• Provide expert guidance on security matters to support secure development and operations.

Minimum Qualifications, Education, and Skills

• 5+ years of experience in information security or a similar role
• Proficiency in vulnerability sc