Senior Information Security Engineer

About Payscale Payscale stands at the forefront of compensation data technology, pioneering an innovative approach that harnesses advanced AI and up-to-date and reliable market data to align employee and employer expectations. With its suite of solutions—Payfactors, Marketpay, and Paycycle—Payscale empowers 65% of Fortune 500 companies to make strategic compensation decisions. Organizations like Panasonic, ZoomInfo, Chipotle, AccentCare, University of Washington, American Airlines, and Rite Aid rely on its unique combination of actionable data and insights, experienced compensation services, and scalable software to drive business success. By partnering with Payscale, businesses can make confident compensation decisions that fuel growth for both their organization and their people.

Create confidence in your compensation. Payscale.To learn more, visit www.payscale.com.Location Payscale Romania has an employee centric hybrid model that provides you the flexibility to do your best work in a space that supports you, while also finding time to collaborate in person in our office for the moments that matter.In our hybrid model, employees can work from the location that works best for them when not in the office.When you work from home, we recommend ensuring that you can meet the following technology, equipment and workspace requirements:

• High-Speed Internet - A stable broadband or fiber connection (satellite is highly discouraged) with a minimum speed of 100 Mbps in a dedicated workspace that has a reliable Wi-Fi signal.
• Device for Multifactor Authentication (MFA/2FA) - smartphone, tablet, etc.

When it matters (usually no more than a few times a year) we take the time to gather in larger groups for in-person events.Payscale has employees across the US, Canada, UK, The Philippines and Romania however we are currently unable to hire in the Quebec Province, Northern Ireland, and Hawaii.We are seeking a proactive and skilled Information Security Engineer to focus on the security of our cloud and datacenter hosting environments. In this role, you will collaborate with cross-functional teams to implement and maintain security controls, monitor vulnerabilities, and support efforts to ensure our infrastructure is secure and compliant with industry standards. This position is ideal for someone with hands-on experience in cloud and datacenter security who is eager to take their expertise to the next level.

Key Responsibilities:

• Implement and maintain security measures across cloud and datacenter environments, including AWS, Azure, and on-premises hosting platforms.
• Manage and optimize the organization’s EDR/XDR platform, including policy creation, tuning, and rule maintenance.
• Lead efforts to review and deploy unused or underutilized features of the EDR/XDR product to improve threat detection and response capabilities.
• Collaborate with Infrastructure and DevOps teams to secure hybrid workloads, including virtual machines, containers, and serverless environments.
• Configure and manage cloud-native security tools, firewalls, and WAFs to protect applications and networks.
• Harden operating systems, networks, and applications using industry standards such as CIS Benchmarks.
• Conduct regular vulnerability assessments and support remediation efforts for cloud and datacenter assets.
• Manage and enhance key and secrets management tools (e.g., HSM, KMS, Azure Key Vault).
• Automate security processes using scripting languages like Python, PowerShell, or Ansible.
• Assist in the development and enforcement of security policies, procedures, and best practices.
• Implement cloud and server security standards and configurations.
• Support cloud hosting environment monitoring using asset and configuration management tools to ensure comprehensive coverage.
• Participate in security incident response processes, including investigation and root cause analysis of hosting-related incidents.
• Stay up-to-date with the latest threats, vulnerabilities, and security technologies, and recommend improvements / new approaches to the security posture.

Requirements and Skills:

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• 5+ years of hands-on experience in information security, with a focus on cloud and datacenter hosting environments.
• Strong knowledge of cloud platforms (AWS, Azure) and their security configurations.
• Experience with cloud-native security tools and frameworks, such as IAM, WAFs, and security monitoring solutions.
• Hands-on experience with EDR/XDR platforms (e.g., CrowdStrike, Microsoft Defender for Endpoint, SentinelOne), including policy conf