Job description

This role is not open to visa sponsorship or transfer of visa sponsorship including those on H1-B, F-1, OPT, STEM-OPT, or TN visa, nor is it available to work corp-to-corp. This role requires a hybrid schedule and will be based in our South Charlotte, NC Headquarters (Tuesday through Thursday) and work fully remotely on Mondays and Fridays each week. Willing to consider candidates located outside of Charlotte, NC with the ability to relocate to the area. Curious how Shared Services fits into Red Ventures? Click here . As a Information Security Engineer, you will identify and reduce risk across our cloud and SaaS environments by surfacing vulnerabilities, tuning detections, and driving remediation with the engineering teams who own the systems. You will own the full incident response lifecycle from alert triage through containment, eradication, and post-incident review. You will hunt for threats before they surface in alerts and partner directly with Infrastructure and Engineering teams across our business units. This is a hands-on, high-ownership role for someone who is energized by complex cloud environments, moves fast under pressure, and takes pride in building repeatable, scalable security operations. If you are a sharp, curious security practitioner who wants real ownership and the chance to shape how security works across a large multi-brand organization, this is that role. What You’ll Do: Identify, assess, and drive reduction of security risk across cloud, SaaS, and enterprise environments Partner with engineering and development teams to remediate vulnerabilities across code, cloud, and endpoint environments Lead end-to-end incident response across cloud and SaaS environments Own proactive threat hunting on a defined cadence Maintain and tune detection rules in the SIEM Contribute to security tooling evaluation and roadmap Produce post-incident reports and present findings to stakeholders Participate in an on-call rotation shared across the team on a rotating basis What We’re Looking For: 4+ years of hands-on experience in one or more of: security monitoring, incident response, vulnerability management, or cloud security Experience in Incident response: end-to-end ownership from triage through containment, eradication, and post-incident review Experience with Cloud security in AWS: applying security controls, monitoring, and response techniques across AWS environments at scale Experience with Security tooling: hands-on experience with SIEM, endpoint protection, and vulnerability scanning platforms in a cloud environment Communication: strong written and verbal skills with the ability to translate technical findings for non-technical stakeholders Nice to Have: Threat intelligence and hunting: disciplined habit of staying current on attacker TTPs and applying that knowledge through structured, hypothesis-driven hunts across cloud, SaaS, and enterprise environments Identity and access management: policy review, least-privilege enforcement, and anomalous access detection SaaS security posture management: monitoring and tuning SaaS application security controls including impossible travel, OAuth abuse, and integration risks Container and CI/CD pipeline security: understanding of Kubernetes security, image scanning, and securing software delivery pipelines Compliance frameworks: working knowledge of PCI DSS, SOC 2, and ISO 27001 and how they map to technical security controls Familiarity with security frameworks (NIST CSF, MITRE ATT&CK, CIS 18) Experience scripting or automating security workflows, including comfort leveraging AI tools to accelerate detection and response Relevant certifications such as AWS Security Specialty or GIAC equivalents Compensation: Total Cash Compensation Range: $100,000 - $150,000 per year Actual compensation varies based on location, experience, and qualifications. Additionally, the following benefits are provided by Red Ventures, subject to eligibility requirements. Health Insurance Coverage (medical, dental, and vision) Life Insurance Short and Long-Term Disability Insurance Flexible Spending Accounts Holiday Pay 401(k) with match Employee Assistance Program Paid Parental Bonding Benefit Program Flexible Paid Time Off (PTO): We believe time to rest and recharge is essential. That’s why we offer a generous and flexible PTO policy. Full-time employees accrue 20 days of PTO for a full calendar year annually, with an increase to 25 days after five years of service. Who We Are: Red Ventures is a global portfolio of high-growth companies — spanning several U.S. businesses, a joint venture in the health services industry, and strategic investments in Europe. Their businesses include The Points Guy, Lonely Planet, Bankrate, the Allconnect Platform, RV Home Client Growth, RV Growth & Transformation, Sage Home Loans Corporation, and more. Across the portfolio, Red Ventures businesses deliver seamless digital experiences for consumers, help Fortune 100 clients solve large-scale digital growth challenges, and create world-class experiences and opportunities for employees. Learn more at redventures.com and follow @RedVentures on LinkedIn and Instagram. At Red Ventures, we believe diverse, inclusive teams are better. To help you better understand our core values and beliefs, we encourage you to watch this brief YouTube video: Our Belief Statements . This will give you insight into the principles that guide our work and our commitment to fostering an inclusive environment. Red Ventures is an equal opportunity employer that does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or any other basis protected by law. Employment at Red Ventures is based solely on a person's merit and qualifications. We are committed to providing equal employment opportunities to qualified individuals with disabilities. This includes providing reasonable accommodation where appropriate. Should you require a reasonable accommodation to apply or participate in the job application or interview process, please contact accommodation@redventures.com. If you are based in California, we encourage you to read this important information for California residents linked here . #LI-LM2 #LI-HYBRID At Red Ventures, we believe in real human connection. That’s why we do not hire someone through text, social media, or email only. As part of the hiring process, you should expect live conversations with RV teammates before any offer is made. Also, keep an eye on the sender: we only use official @redventures.com email addresses at the portfolio level or business specific email addresses (e.g., @thepointsguy.com), not ones like “redventurescareer.com.” We will never ask candidates to send money, buy equipment, or share financial account info during your journey with us. You can always find our open roles on redventures.com— if you receive a message that seems suspicious, please use redventures.com to verify the opportunity. For more, the U.S. Federal Trade Commission has published helpful articles to help individuals learn more about protecting themselves from recruiter scams. If you think you’ve been targeted, feel free to report it to your local authorities. Stay safe out there! Click here for more details regarding the employee privacy policy: redventures.com Questions about this Privacy Notice can be directed to employeerights@redventures.com . Alternatively, you may raise any questions or concerns to your manager, HR Business Partner, or through the Privacy Team.

Requirements

Must-haves

This role is not open to visa sponsorship or transfer of visa sponsorship including those on H1-B, F-1, OPT, STEM-OPT, or TN visa, nor is it available to work corp-to-corp.
Curious how Shared Services fits into Red Ventures? Click here .
If you are a sharp, curious security practitioner who wants real ownership and the chance to shape how security works across a large multi-brand organization, this is that role.
Identify, assess, and drive reduction of security risk across cloud, SaaS, and enterprise environments
Partner with engineering and development teams to remediate vulnerabilities across code, cloud, and endpoint environments
Lead end-to-end incident response across cloud and SaaS environments
Own proactive threat hunting on a defined cadence
Maintain and tune detection rules in the SIEM
Contribute to security tooling evaluation and roadmap
Produce post-incident reports and present findings to stakeholders
Participate in an on-call rotation shared across the team on a rotating basis
4+ years of hands-on experience in one or more of: security monitoring, incident response, vulnerability management, or cloud security
Experience in Incident response: end-to-end ownership from triage through containment, eradication, and post-incident review
Experience with Cloud security in AWS: applying security controls, monitoring, and response techniques across AWS environments at scale
Experience with Security tooling: hands-on experience with SIEM, endpoint protection, and vulnerability scanning platforms in a cloud environment
Communication: strong written and verbal skills with the ability to translate technical findings for non-technical stakeholders

Nice-to-haves

Threat intelligence and hunting: disciplined habit of staying current on attacker TTPs and applying that knowledge through structured, hypothesis-driven hunts across cloud, SaaS, and enterprise environments
Identity and access management: policy review, least-privilege enforcement, and anomalous access detection
SaaS security posture management: monitoring and tuning SaaS application security controls including impossible travel, OAuth abuse, and integration risks
Container and CI/CD pipeline security: understanding of Kubernetes security, image scanning, and securing software delivery pipelines
Compliance frameworks: working knowledge of PCI DSS, SOC 2, and ISO 27001 and how they map to technical security controls
Familiarity with security frameworks (NIST CSF, MITRE ATT&CK, CIS 18)
Experience scripting or automating security workflows, including comfort leveraging AI tools to accelerate detection and response
Relevant certifications such as AWS Security Specialty or GIAC equivalents

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsci/cdkubernetesairest

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Health Insurance

Dental

Vision

401(K)

Pto

Paid Time Off