Lead InfoSec Engineer

Direct message the job poster from Blue Signal Search

Location: Remote — occasional quarterly travel to a U.S. hub site

Our client is a high-growth, technology-forward financial services firm that is redefining how self-directed investors engage the markets. With record user adoption and major investments in cloud-native architecture, they are elevating security to the forefront of every product decision. As the first Lead Info Sec Engineer, you will set the vision, own the roadmap, and build scalable safeguards that keep millions of daily transactions safe — all while enjoying the flexibility of a remote role anchored in two of the country’s most dynamic tech communities.

• Own the technical strategy for protecting hybrid cloud (AWS & Azure) and on-prem workloads, aligning security controls with business risk.
• Select, deploy, and tune key defenses — including IAM/PAM, EDR, IDS/IPS, firewalls, and SIEM — driving maximum ROI from each tool.
• Lead periodic threat-modeling sessions, vulnerability scans, and penetration tests, then partner with engineering to close gaps quickly.
• Champion Dev Sec Ops  practices by integrating security checks into CI/CD pipelines and infrastructure-as-code.
• Direct the full incident-response lifecycle, from detection through root-cause analysis and post-mortem reporting.
• Maintain up-to-date architecture diagrams, runbooks, and compliance artifacts (SOC 2, ISO 27001, PCI DSS, etc.).
• Mentor and upskill security analysts and junior engineers, fostering a culture of continuous learning and operational excellence.

• 7+ years designing and engineering enterprise-grade information-security solutions.
• Hands-on experience securing multi-cloud environments (preferably AWS and/or Azure).
• Deep familiarity with privileged-access management platforms such as Cyber Ark or Beyond Trust.
• Scripting / automation skills in Python, Power Shell, or Terraform to reduce manual toil.
• Strong grasp of networking fundamentals, secure systems design, and modern application architectures (containers, serverless, micro-services).
• Proven leadership in incident response and cross-functional project delivery.
• Industry certifications (e.g., CISSP, GIAC, OSCP) are a plus, not a must.

• Impact at scale — your decisions will safeguard billions in customer assets.
• Remote-first culture with a collaborative, “engineer-led” mindset.
• Competitive base salary, annual performance bonus, equity program, and Day-1 benefits for you and your family.
• Unlimited PTO and true schedule flexibility — we measure outcomes, not desk time.
• Full access to premium trading education resources to sharpen your own investment edge.

Ready to take the reins of a cloud-first security program? Apply today with your résumé or reach out confidentially to our Blue Signal recruiting team. Let’s build something extraordinary together.