Information Security Engineer

Role Overview

Keeper Security is hiring an Information Security Engineer to strengthen and scale security operations and enterprise security controls across a global organization. The role is focused on security operations execution and security control ownership, working closely with Observability Engineering, Application Security, Vulnerability Management, DevOps/IT/Engineering, and Compliance.

Location / Work Model

• 100% remote
• Opportunity for a hybrid schedule for candidates based in El Dorado Hills, CA or Chicago, IL metro area

Responsibilities

• Security incident response: triage, investigation support, containment coordination, lessons learned, and corrective action tracking
• Build and maintain incident response playbooks/runbooks, escalation paths, and participate in tabletop exercises
• Operate and improve enterprise security controls and tooling, including:
  • endpoint protection/EDR
  • SaaS security controls
  • email security
  • access control workflows
• Partner with Observability Engineering to ensure security-relevant telemetry is available for investigations/response (without owning SIEM/telemetry administration)
• Partner with Vulnerability Management to drive remediation execution, validate fixes (where appropriate), and reduce repeat findings via hardening/control improvements
• Coordinate investigations with DevOps, IT, and Engineering; track actions through closure and document outcomes
• Support access governance and least-privilege initiatives (access reviews, privileged access workflows, secure authentication controls)
• Create and maintain security documentation for processes/controls/operational procedures
• Support security control evidence and operational readiness for compliance frameworks such as SOC 2, ISO 27001, FedRAMP/GovRAMP, and NIST 800-53
• Identify opportunities for automation to improve security operations efficiency (ticketing workflows, control checks, integrations, scripting)

Requirements

• 5+ years of experience in Information Security / Security Engineering / Security Operations in a SaaS or cloud-centric environment
• Hands-on experience supporting incident response

Nice-to-Haves / Additional Signals

• Experience owning or improving security controls and security workflows (e.g., endpoint/SaaS/email/access control)
• Comfort partnering cross-functionally and driving remediation to measurable outcomes