Information Security Engineer

{
  "content_hash": "3cde92b3b309a1b3c2f19203a9a91b2322aae600501c3a8e2c0b22ef86865888",
  "source_hash": "ff4fb155ab19b2d43ab60a3b909c7ecdc56f750893234480cd495eb5d24fe642",
  "last_changed_at": "2026-05-30T05:56:50.697Z",
  "active_status": "active"
}

{
  "dedupe": null,
  "language": "en",
  "location": {
    "raw": "Lexington, Kentucky, United States",
    "city": "Lexington",
    "region": "KY",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-22T10:52:30.408Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "Lexington, Kentucky, United States",
      "city": "Lexington",
      "region": "KY",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "hybrid",
  "salary_period": null,
  "workplace_type": "hybrid",
  "salary_currency": null
}

{}

{
  "list_job": {
    "id": "118",
    "isRemote": null,
    "location": {
      "city": null,
      "state": null
    },
    "atsLocation": {
      "city": "Lexington",
      "state": "Kentucky",
      "country": "United States",
      "province": null
    },
    "departmentId": "18461",
    "locationType": "1",
    "jobOpeningName": "Information Security Engineer",
    "departmentLabel": "Operations",
    "employmentStatusLabel": "Full-Time"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": null,
      "state": null,
      "postalCode": null,
      "addressCountry": null
    },
    "datePosted": "2026-04-02",
    "atsLocation": {
      "city": "Lexington",
      "state": "Kentucky",
      "country": "United States",
      "countryId": "1"
    },
    "description": "<p><span style=\"font-weight: bold\"><span><span>Information Security Enginee</span><span>r</span></span></span></p>\n<p><br></p>\n<p><span style=\"font-weight: bold\"><span><span>About<span> </span></span><span>Bitwerx</span></span></span><span> </span></p>\n<p><span><span>Bitwerx</span><span>, Inc. is a team of industry experts focused on designing, building, and supporting innovative software solutions that<span> </span></span><span>leverage</span><span><span> </span>data to improve<span> </span></span><span>the customer</span><span><span> </span>journey. Our experience spans many industries with a focus on veterinary, and our partners range from startups trying to bring a new idea to market to Fortune 500 companies looking to become more agile.</span></span></p>\n<p><span><br></span></p>\n<p><span style=\"font-weight: bold\"><span><span>About the role</span></span></span><span> </span></p>\n<p><span><span>We are seeking a</span><span>n<span> </span></span><span>Information Security Engineer to serve as the primary owner of<span> </span></span><span>Bitwerx’s</span><span><span> </span>Information Security governance, policies, and compliance framework, leading the design, implementation, and ongoing maturation of the security program with a core focus on SOC 2 Type 2 and broader U.S. and international compliance requirements.</span></span><span> </span></p>\n<p><span><span>This is a hands-on individual contributor role. You will<span> </span></span><span>be responsible for</span><span><span> </span>building practical, scalable security controls; refining policies and standards; operationalizing compliance requirements; and partnering closely with our Platform Delivery</span><span><span> </span></span><span>and Software Engineering teams to embed security into day-to-day operations</span><span>.</span></span><span> </span></p>\n<p><br></p>\n<p><span style=\"font-weight: bold\">This role may be based in Lexington, KY (hybrid) or performed remotely from select U.S. locations.</span></p>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>What<span> </span></span><span>Y</span><span>ou’ll</span><span><span> </span></span><span>D</span><span>o</span></span></span><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Security &amp; Compliance Program Ownership</span></span></span><span> </span></p>\n<ul>\n<li><span><span>Own<span> </span></span><span>end-to-end SOC 2 Type 2 execution</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>D</span><span>esign,<span> </span></span><span>refine, and<span> </span></span><span>validate</span><span><span> </span>security controls</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Prepare audit evidence and remediation plans</span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Policy, Risk and Governance</span></span></span><span> </span></p>\n<ul>\n<li><span><span>Author and<span> </span></span><span>maintain</span><span><span> </span>security policies and standards</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Maintain the risk register and treatment plans</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Manage vendor risk workflows</span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Cloud and Platform Security</span></span></span><span> </span></p>\n<ul>\n<li><span><span>Implement Azure security guardrails</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Enforce IAM, RBAC, MFA and conditional access</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Maintain the risk register and treatment plans</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Secure CI/CD pipelines and secrets</span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Monitoring and Incident Response</span></span></span><span> </span></p>\n<ul>\n<li><span><span>Implement centralized logging and alerting</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Maintain Incident Response playbooks and lead response efforts</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Perform root cause analysis</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Manage tabletop exercises using real-world examples for team training</span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Audit and Automation</span></span></span><span> </span></p>\n<ul>\n<li><span><span>Aut</span><span>omate compliance evidence collection</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Ensure controls are sustainable year over year</span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>What<span> </span></span><span>You’ll</span><span><span> </span>Bring</span></span></span><span> </span></p>\n<ul>\n<li><span><span>3+ years in security and/or compliance engineering</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>S</span><span>OC 2 Type 2 hands-on experience</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>E</span><span>xperience implementing international security and privacy compliance controls (e.g., GDPR, OSFI, and similar regulatory frameworks)</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>S</span><span>trong understanding of security architecture and risk management for data-centric organizations, including large-scale data storage, processing, access controls, and data lifecycle governance</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>A</span><span>zure cloud security experience</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>S</span><span>trong written and technical communication skills</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Proactive, c</span><span>ollaborative team player who thrives in a fast paced, small company environment</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Experience with<span> </span></span><span>Drata</span><span><span> </span>is preferred</span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>What Success Looks Like</span></span></span><span> </span></p>\n<ul>\n<li><span><span>P</span><span>redictable</span><span>, low-stress audits</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Embedded security controls</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Automated evidence collection</span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Why This Role Matters</span></span></span><span> </span></p>\n<p><span><span>Security and compliance are foundational to<span> </span></span><span>Bitwerx’s</span><span><span> </span>growth,<span> </span></span><span>reputation</span><span><span> </span>and customer trust</span><span>.</span></span><span> </span></p>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>What We Offer</span></span></span><span> </span></p>\n<ul>\n<li><span><span>100% company-paid health, vision, and dental insurance</span><br></span></li>\n</ul>\n<ul>\n<li><span><span>401(k) with company match</span><br></span></li>\n</ul>\n<ul>\n<li><span><span>Robust PTO policy</span><br></span></li>\n</ul>\n<ul>\n<li><span><span>A collaborative and inclusive work culture</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Opportunities for professional growth and development</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>The chance to make a significant impact on a growing company</span></span><span> <br></span><span><br></span><span> </span></li>\n</ul>\n<p><span><span>Bitwerx</span><span>, Inc. is an Equal Opportunity Employer. Your application will be considered regardless of race, color, national origin, age, disability, gender, sexual orientation, gender identity or expression, marital status, or veteran status. You must be legally authorized to work in the U.S. </span></span><span> </span></p>",
    "compensation": "$120,000.00/year",
    "departmentId": "18461",
    "locationType": "1",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "Information Security Engineer",
    "departmentLabel": "Operations",
    "jobOpeningStatus": "Open",
    "minimumExperience": "Mid-level",
    "jobOpeningShareUrl": "https://bitwerxinc.bamboohr.com/careers/118",
    "employmentStatusLabel": "Full-Time"
  }
}