Information Security Engineer

About the role

CORTO is looking for an Information Security Engineer to join its fast‑growing security team. You will work closely with development, AI automation, DevOps and product groups to embed security and responsible AI practices across cloud, application and AI‑enabled workflows.

Key responsibilities

• Design, implement and maintain cloud security controls for IAM, networking, logging, encryption, monitoring and related infrastructure.
• Review cloud architectures and infrastructure‑as‑code to ensure alignment with security standards and secure design principles.
• Define and maintain cloud security guardrails, technical standards, patterns, documentation and playbooks.
• Manage and improve security tooling such as CNAPP, SIEM, XDR, vulnerability scanning and detection/response platforms.
• Monitor, investigate and respond to security alerts and incidents, performing root‑cause analysis and remediation tracking.
• Conduct vulnerability assessments, risk analysis, threat modelling, design reviews and security assessments of applications, containers and APIs.
• Support SOC 2 compliance, respond to customer trust requests, complete security questionnaires and perform third‑party risk assessments.

Required profile

• 3‑5 years of experience in information security engineering.
• Strong hands‑on experience securing AWS environments.
• Solid understanding of IAM, least‑privilege access, identity federation and network security.
• Experience with logging, monitoring, alerting and encryption (in‑transit and at‑rest).
• Familiarity with Microsoft Entra security, vulnerability management tools and endpoint/MDM solutions.
• Good knowledge of security frameworks and compliance standards.

Required skills

• AWS
• IAM
• CNAPP
• SIEM
• XDR
• Vulnerability scanning tools
• Microsoft Entra
• Endpoint security
• MDM