Information Security Engineer

Stack

Responsibilities

• ▹Manage AWS security posture, triage findings (GuardDuty, Security Hub)
• ▹Operate and extend EDR and SIEM, author detection queries, tune alerts
• ▹Lead incident response: investigation, containment, forensic analysis
• ▹Run vulnerability management cadence and remediation tracking
• ▹Manage security awareness training (KnowBe4 phishing tests)
• ▹Support WAF monitoring and IaC security review
• ▹Collaborate on data mapping, DLP, classification, and compliance controls
• ▹Advise on product security questions and maintain runbooks

Requirements

• ▹4+ years in security engineering or operations with real incident response experience
• ▹Strong AWS security knowledge (IAM, logging, GuardDuty, Security Hub)
• ▹Proficiency with SIEM query languages and detection tuning
• ▹At least one scripting language (Python preferred)
• ▹Experience with vulnerability management tooling
• ▹Comfortable operating independently in a distributed team
• ▹Strong written English
• ▹Experience leveraging AI tools to improve workflows

Nice to have

• ▹PCI DSS or SOC 2 environment experience, ASV scan operations
• ▹Terraform/IaC security review experience
• ▹Exposure to securing AI-assisted development or agentic tooling

Soft skills

About the company

8am builds software that helps legal, accounting, and other service-based businesses run payments, client experience, and operations, serving 250,000+ US professionals.