Jobs and Careers
BI
Sr. Information Security Engineer
BigPandaRemote - USA, United StatesRemotefull_timeVerifiedPosted 12 Aug 2025
💰 $175,000/yr
About the role
Sr. Information Security Engineer - Remote role open to applicants in the USA
BigPanda is looking for an experienced security professional to help lead and execute BigPanda’s information security efforts. This is a hands-on, high-impact contract role focused on both tactical and strategic initiatives across product, IT, vendor, and enterprise security.
You will play a key role in representing BigPanda’s security posture to our customers. That means clearly communicating our practices and controls, answering detailed security questions, and listening carefully to customer requirements and concerns. You will need to be comfortable in customer-facing settings, such as architectural review boards and vendor risk assessments, and be able to respond to customers with clarity and confidence.
Internally, you will be responsible for designing, implementing, and managing security controls across the company. You’ll assess and report on their effectiveness, and contribute to decisions through risk assessments, dashboards, and metrics. You’ll also ensure that our practices align with SOC 2 Type II and other relevant compliance frameworks.
Given BigPanda’s focus on building AI-enabled and agentic SaaS applications, deep AI security expertise is essential. You must understand the security challenges and requirements of modern AI application architectures, including components like LLMs, RAG pipelines, vector databases, chain-of-thought reasoning, prompt management, monitoring, and Model Context Protocols (MCPs). This role will help define and enforce security practices that ensure these AI systems operate safely, reliably, and in compliance with privacy and governance requirements.
This role requires broad, hands-on experience across a broad range of security functions and day-to-day operations of security tools and processes.
Responsibilities
Qualifications
BigPanda is looking for an experienced security professional to help lead and execute BigPanda’s information security efforts. This is a hands-on, high-impact contract role focused on both tactical and strategic initiatives across product, IT, vendor, and enterprise security.
You will play a key role in representing BigPanda’s security posture to our customers. That means clearly communicating our practices and controls, answering detailed security questions, and listening carefully to customer requirements and concerns. You will need to be comfortable in customer-facing settings, such as architectural review boards and vendor risk assessments, and be able to respond to customers with clarity and confidence.
Internally, you will be responsible for designing, implementing, and managing security controls across the company. You’ll assess and report on their effectiveness, and contribute to decisions through risk assessments, dashboards, and metrics. You’ll also ensure that our practices align with SOC 2 Type II and other relevant compliance frameworks.
Given BigPanda’s focus on building AI-enabled and agentic SaaS applications, deep AI security expertise is essential. You must understand the security challenges and requirements of modern AI application architectures, including components like LLMs, RAG pipelines, vector databases, chain-of-thought reasoning, prompt management, monitoring, and Model Context Protocols (MCPs). This role will help define and enforce security practices that ensure these AI systems operate safely, reliably, and in compliance with privacy and governance requirements.
This role requires broad, hands-on experience across a broad range of security functions and day-to-day operations of security tools and processes.
Responsibilities
- Act as a subject matter expert in the development, implementation, and oversight of BigPanda’s information security and privacy program
- Maintain and mature the company’s security posture and ensure compliance with applicable frameworks and regulations
- Monitor the external threat landscape and advise on detection and remediation of emerging threats
- Develop and implement governance controls for AI systems, ensuring secure use of AI technologies in compliance with data protection and privacy standards
- Investigate potential security incidents and lead response efforts
- Coordinate external security audits, including SOC 2 and penetration testing activities
- Evaluate third-party vendors’ security, privacy, and business continuity programs
- Partner with internal teams to conduct company-wide and vendor risk assessments and maintain the risk register
- Respond to customer security inquiries, questionnaires, and annual risk reviews
- Identify and mitigate issues related to security events, compliance gaps, infrastructure vulnerabilities, and team operations
- Lead the vulnerability management program, including scanning, assessment, and remediation
- Review new technologies and vendors for security risks and areas of improvement
- Work closely with DevSecOps, DevOps, and R&D teams to align security with product development
- Maintain documentation and requirements for incident response, disaster recovery, business continuity, and impact analysis
- Oversee access provisioning for company systems
- Manage and support daily operations of security tools and controls (e.g., endpoint protection, DLP, email security, encryption, firewalls, log monitoring)
Qualifications
- Strong interpersonal and communication skills with the ability to work across internal teams and with external customers
- Confident presence in executive and customer-facing meetings as a trusted security advisor
- Ability to translate technical security concepts into business terms for leadership
- Experience securing AI systems, including knowledge of model risk, prompt injection, data governance, and safe deployment practices in enterprise environments
- Knowledge of AI infrastructure and application components
- Deep experience in cloud security (AWS) and general IT system controls
- Experience configuring and monitoring Cloudflare ZTNA and WAF
- Experience using Wiz or similar CSPM, SAT, and Threat Detection tools
- Broad knowledge of security domains, including network architecture, encrypti
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s