Information Security Engineer

What You’ll Do:

Koalafi is looking for a talented, driven Information Security Engineer to join our growing Information Security team. You’ll work closely with our Director of Information of Security to safeguard Koalafi’s data, infrastructure, associates, merchants and customers. This role will focus on implementing secure solutions, supporting compliance initiatives, enhancing our detection and response capabilities, and partnering with teams across the company to build a security-first culture.

This is a hands-on, deeply technical position with a wide scope of responsibilities. It is an opportunity to gain experience with many technologies, work with extremely talented technologists, and make a lasting impact on fast-growing company. In this role you will:

• Assist with building, maintaining, and rolling out organization-wide security tooling, configurations policies, hardening standards, and patch management.
• Perform blue team operations by supporting alert triage, incident response, and forensic investigations. Including the monitoring, querying, and tuning of SIEM-based alerts.
• Support secure software development by partnering with our Development and DevOps teams on the DevSecOps lifecycle, code/container scanning, and vulnerability classification & remediation.
• Help implement and manage enforce security policy compliance.
• Contribute to compliance readiness efforts (e.g., SOC 2, PCI-DSS).
• Maintain identity and access controls and compliance across cloud-based IAM systems, including user & policy management.
• Assist in the administration and auditing of various SaaS tools, including anti-malware, anti-spam, SASE, VPN.
• Assist in business continuity and disaster recovery planning, supporting documentation and testing efforts.
• Be a security champion by helping internal associates with security guidance, best practices, and training.
• Stay ahead of emerging threats by staying up to date on threat intelligence that may affect our organization.

About You:

• Bachelor’s degree in Cybersecurity, Information Technology, Information Assurance, or equivalent years of work experience in the Cybersecurity and/or Information Technology field.
• 4+ years of professional cybersecurity experience.
• Strong problem-solving and analytical ability.
• Location Requirement: This position requires regular in-person attendance at one of our two office locations (Richmond, VA or Arlington, VA). Candidates must already be located within a commutable distance to either location, as relocation assistance is not available at this time.

Preferred Qualifications:

• 3+ years of experience securing cloud environments (AWS, Azure).
• Azure tooling: Entra, Sentinel, Purview, Defender for Cloud
• AWS tooling: GuardDuty, CloudTrail, Security Hub, Macie, IAM
• Experience using vulnerability management tooling (SaaS and local machine).
• Tooling: Tenable, Rapid7, or similar
• Experience working with Development & DevOps teams.
• Experience performing security audits and remediation efforts.
• Experience with scripting for automation (PowerShell, Bash, Python).
• Experience with security & compliance frameworks (OWASP, MITRE, NIST, SOC).
• Basic red teaming knowledge (ZAP, Burp, etc.).
• Previous Information Technology working experience (Support, SysAdmin, etc.).