> Markdown version of [/jobs/ext/204412-information-security-engineer-usa](https://www.wearedevelopers.com/jobs/ext/204412-information-security-engineer-usa). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer - USA - **Company:** Athena PH - **Location:** Wilmington, NC, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Apple Mac Systems, Authentication Protocols, Bash Shell, Software as a Service, Cloud Computing Security, Collaborative Software, CompTIA Security+, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Security Assertion Markup Language (SAML), Security Information and Event Management, Data Logging, Enterprise Software Applications - **Published:** May 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=4faefdf0e57f23db ## About the Role Do you have experience in Tooling?, * 4+ years of experience in information security, security engineering, IT security, or related fields. * Experience administering enterprise identity providers and access management systems. * Experience with endpoint management and endpoint security tooling. * Familiarity with security monitoring, logging, and incident response workflows. * Strong understanding of authentication protocols and identity security concepts, including SAML, OIDC, OAuth, SCIM, MFA, conditional access, and RBAC. * Experience working in cloud-first environments using modern SaaS platforms. * Strong scripting or automation experience using Python, Bash, PowerShell, or similar. * Ability to balance security requirements with operational usability and business needs. * Strong communication and cross-functional collaboration skills. Preferred * Experience securing macOS environments at scale. * Experience with modern browser security and data protection technologies. * Experience with cloud-native security monitoring or SIEM platforms. * Familiarity with MDM/UEM platforms, EDR solutions, identity governance, and SaaS security tools. * Experience implementing automation around identity lifecycle management. * Familiarity with infrastructure-as-code or cloud security practices. * Experience in high-growth startup or enterprise environments. * Security certifications such as Security+, CISSP, GIAC, identity provider certifications, endpoint management certifications, or equivalent. ## Description We are looking for an Information Security Engineer to help scale and mature our corporate security program in a fast-moving, high-growth environment. This role will focus on identity and access management, endpoint security, SaaS security, corporate infrastructure security, and security operations enablement. The ideal candidate is hands-on, automation-minded, and comfortable partnering across IT, Engineering, Infrastructure, HR, and Compliance teams to improve security controls while maintaining a strong employee experience. You will help design and operate security systems that protect corporate assets, secure employee access, improve visibility, and reduce organizational risk across cloud-first and SaaS-heavy environments., * Design, implement, and improve identity and access management controls across enterprise applications and infrastructure. * Manage and optimize SSO, MFA, lifecycle management, conditional access, RBAC, and privileged access workflows. * Partner with IT and business stakeholders to implement least-privilege access models. * Support onboarding, offboarding, and automated provisioning/deprovisioning workflows. * Conduct periodic access reviews and help drive remediation efforts. * Improve authentication security and identity posture across corporate systems. Corporate Security Engineering * Secure and manage corporate endpoints across macOS, Windows, and cloud-managed environments. * Improve endpoint visibility, hardening, monitoring, and response capabilities. * Help implement and tune modern endpoint protection, browser security, device trust, and web/data protection controls. * Partner with Infrastructure and IT teams on secure configuration standards and operational improvements. * Support security initiatives related to enterprise SaaS applications and collaboration platforms. * Assist with vendor and third-party security evaluations related to enterprise tooling. Security Operations & Monitoring * Assist with security monitoring, detection engineering, and incident response activities. * Improve log visibility and telemetry coverage across identity, endpoint, and SaaS platforms. * Build and maintain detections, alerts, and operational playbooks. * Participate in incident investigations and post-incident remediation efforts. * Help operationalize security metrics and reporting. Automation & Engineering * Build automations and integrations that improve security operations efficiency. * Develop scripts and workflows to reduce manual processes. * Partner with Engineering and Infrastructure teams to improve security guardrails and operational maturity. * Contribute to infrastructure-as-code and policy-as-code initiatives where applicable. Compliance & Security Programs * Support security compliance initiatives such as SOC 2, ISO 27001, or similar frameworks. * Help document technical controls, processes, and operational procedures. * Participate in risk assessments and remediation tracking. * Contribute to security awareness and internal enablement efforts. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)