Description
About Us
HSP Group is the premier provider of global expansion services, helping companies simplify the complex challenges of operating internationally. We deliver a seamless experience across legal entity setup, global HR, payroll, compliance, tax, and advisory, enabling our clients to scale faster, stay compliant, and reduce risk in every market they enter.
With scale-up organizations and innovative technology firms expanding at unprecedented speed, HSP is uniquely positioned to become their trusted global partner.
Job Description
This is a remote role.
We are seeking a hands-on, mid-level Information Security Engineer to help protect our SaaS products, harden our cloud and endpoint environments, and mature our overall security program. This role sits at the intersection of technical security operations and governance. You will manage vulnerabilities across our products and infrastructure, contribute to corporate security policies, lead SOC 2 efforts, and serve as a key voice in customer and vendor security conversations.
Our entire technology stack runs in Microsoft Azure, and we leverage the broader Microsoft security ecosystem (Intune, Defender, Purview) alongside best-in-class tooling like Datadog, GitHub, and Snyk. You will work closely with Engineering, IT, Legal, and Product teams to drive measurable improvements to our security posture.
Responsibilities:
Vulnerability & Product Security
- Lead the company’s SOC 2 compliance program, including readiness, control implementation, evidence collection, ongoing monitoring, remediation, and coordination with auditors through successful completion of the audit.
- Lead the vulnerability management program across our SaaS products, cloud infrastructure, containers, and endpoints including identification, triage, prioritization, remediation tracking, and reporting.
- Operate and tune SAST, SCA, and dependency-scanning tooling (e.g., Snyk, GitHub Advanced Security/Dependabot) and partner with engineering teams to drive timely remediation.
- Monitor runtime and infrastructure telemetry (e.g., Datadog) for security signals; investigate alerts and lead containment and follow-up actions.
- Track and report on vulnerability SLAs, mean-time-to-remediate, and other security KPIs to leadership.
Cloud & Endpoint Security
- Enhance the security posture of our Microsoft Azure environment including identity, networking, data, and workloads through configuration hardening, policy enforcement, and continuous monitoring.
- Administer and improve Microsoft Intune for endpoint configuration, compliance, and mobile device management.
- Tune and maintain Microsoft Defender (Endpoint, Cloud, and related products) for threat detection, response, and reporting.
Governance, Risk & Compliance
- Draft, update, and maintain corporate information security policies, standards, and procedures aligned to recognized frameworks (e.g., SOC 2, ISO 27001, NIST CSF).
- Lead the response to customer and prospect security questionnaires, RFPs, and due-diligence requests, and maintain a reusable response library.
- Support vendor risk assessments and third-party security reviews.
- Assist with internal and external audits, evidence collection, and remediation of findings.
Security Program & Collaboration
- Partner with Engineering on secure SDLC practices, threat modeling, and code review guidance.
- Contribute to security awareness training, phishing simulations, and a strong security culture across the company.
- Help mature incident response playbooks and participate in tabletop exercises and on-call rotations as needed.
Requirements:
- 4–6 years of professional experience in information security, application security, cloud security, or a closely related role.
- Experience in preparing for SOC 2 Type 2 attestations for SaaS products.
- Hands-on experience securing SaaS applications and workloads running in Microsoft Azure.
- Demonstrated experience with vulnerability management tooling and process including triage, prioritization (e.g., CVSS, EPSS, exploitability context), and driving remediation through engineering teams.
- Working proficiency with several of the following: Microsoft Intune, Microsoft Defender (Endpoint/Cloud), Microsoft Purview, Datadog, GitHub (Advanced Security, Dependabot, code scanning), and Snyk.
- Solid understanding of identity and access management concepts, particularly Microsoft Entra ID (Azure AD), conditional access, and least-privilege design.
- Experience writing or substantially contributing to security policies, standards, or procedures.
- Experience in responding to customer security questionnaires and supporting compliance efforts.
- Strong written and verbal communication skills and able to translate technical risk for both engineers and non-technical stakeholders.
Nice to Have:
- Industry certifications such as CISSP, CCSP, AZ-500, SC-200, SC-100, GCIH, GSEC, or equivalent.
- Experience with container and Kubernetes security.
- Exposure to threat modeling, secure code review, or penetration testing.
- Prior experience in a SaaS company or regulated industry.
If you’re a driven individual who wants to make your mark in the heart of the innovation economy, we’d love to meet you. Join our #HSPGlobalSolutionTeam and help us power the next wave of global growth.
Similar jobs
Est. 125,000 USD
About Us HSP Group is the premier provider of global expansion services, helping companies simplify the complex challenges of operating internationally. We deliver a seamless experience across legal entity setup, global…
Est. 92,500 USD
CyberSheath Services International LLC is a rapidly growing Security and IT Managed Services Provider primarily focused on providing Cybersecurity services to the Defense Industrial Base (DIB). We are excited to be expan…
Est. 120,000 USD
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Team: Information Security Position Overview: Squarepoint is seeking a subject matter expert to join our Information Security team as a Senior Information Security Engineer. This senior position plays a pivotal role in s…
Are you looking for a role that motivates and challenges you? Are you ready for an opportunity for growth? Do you want to work on teams where people roll up their sleeves to take on tough problems together, and regularly…
Est. 140,000 USD
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Est. 144,000 USD
About Appspace: At Appspace, we’re passionate about creating better work experiences for people everywhere, and we’re looking for people that feel the same way. Our global office locations and flexible work culture help…
Salt Security is the original API Security vendor pioneering the market as the first vendor in 2018. Since then we have exhibited hyper-growth in a number of customers, threats stopped, and revenue. We saw API security a…
Est. 120,000 USD
About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies…
Est. 90,000 USD
EVOCS OVERVIEW EVOCS was founded with a clear purpose: to help businesses operate more effectively, solve complex challenges, and create opportunities for growth through practical expertise and technology solutions. As a…
Est. 87,500 USD
EVOCS OVERVIEW EVOCS was founded with a clear purpose: to help businesses operate more effectively, solve complex challenges, and create opportunities for growth through practical expertise and technology solutions. As a…
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Yext (NYSE: YEXT) is the enterprise agentic marketing platform. Built on the world's most comprehensive structured data platform for local businesses, Yext gives brands and their partners the visibility intelligence to w…
Est. 205,000 USD
At OpenSpace, we’re redefining how the world’s most complex projects are built. Our AI-powered Visual Intelligence Platform uses computer vision and spatial AI to give construction teams a real-time view of what’s happen…
About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border paymen…
Est. 124,000 USD
Position Overview: The Senior Information Security Engineer is tasked with overseeing the development and deployment of advanced security solutions across an organization’s technology stack. They lead complex projects, s…
Build More Than Just a Career. Build Your Future. At Vailexa, we’re not just hiring — we’re building thinkers, creators, and future leaders. We believe in giving people the space to grow, the freedom to think, and the op…
Est. 262,500 USD
CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the wo…
Est. 80,000 GBP
About the Position We are looking for an Infrastructure Security Engineer with a strong Windows engineering background and practical exposure to modern platform security controls to help our global team secure Jane Stree…
Est. 120,000 USD
Arionkoder is an AI consulting firm helping companies build, embed, and own AI systems that drive real business outcomes. We combine Product Development, Artificial Intelligence, and Team Augmentation to craft digital pr…
Est. 204,500 USD
Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD…
Est. 192,750 USD
Are you looking for a role that motivates and challenges you? Are you ready for an opportunity for growth? Do you want to work on teams where people roll up their sleeves to take on tough problems together, and regularly…
Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…
Est. 290,000 USD
About Hightouch Hightouch is an Agentic Marketing Platform powered by the industry-leading Composable CDP. With complete brand context, customer data, and performance history in one place, every marketer finally has the…
Est. 155,000 USD
HSO is seeking an Azure Cloud Architect to lead solution design and drive hands-on delivery of complex Microsoft Azure engagements for our clients. This role owns the architecture from discovery through implementation—sp…
We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing b…
Est. 165,000 USD
Synack’s Penetration Testing as a Service platform manages customers’ attack surfaces by discovering new assets, pentesting for critical vulnerabilities and gaining visibility into the root causes of security risks. We a…
Est. 65,000 GBP
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
Est. 120,000 USD
About the Position We are looking for an IT Security Engineer with a strong Windows engineering background and practical exposure to modern platform security controls to join a global team dedicated to securing Jane Stre…
Est. 135,000 USD
Dark Wolf is looking for a Mid-Level DevSecOps SME / Information System Security Engineer (ISSE) to join a collaborative, dynamic team in a fast-paced, innovative mission environment. This position will work hand-in-hand…