Principal, Information Security

About the role

We are hiring an Information Security Lead to be a hands-on player and coach that leads the Information Security & Compliance function at interos.ai. You will build, run, and continuously improve our security posture across security engineering, security operations, and GRC.

Responsibilities

• Own and operate the security tooling stack end to end, including identity and Zero Trust management; endpoint management; network security controls; vulnerability management; and security monitoring and logging
• Lead incident response from initial triage through containment, investigation, root cause analysis, and post-mortem documentation
• Manage disaster recovery planning and lead DR and incident response tabletop exercises to validate business continuity and incident readiness
• Plan and lead red team / purple team exercises to validate security controls and stress-test incident response readiness
• Work closely with the Engineering and Platform team on architecture and design reviews, providing security guidance on new features, integrations, and infrastructure changes
• Harden cloud and on-premises environments, managing IAM policies, endpoint protection, and network security controls
• Work with contractors and external security partners to maintain SOC2 and CMMC compliance posture, including managing the control environment, coordinating evidence collection, and tracking remediation across teams
• Handle customer-facing and vendor-facing security questionnaires independently, translating interos.ai’s security posture into clear, polished written responses
• Review customer and prospect contracts for security terms, including DPAs and security addendums, partnering with Legal on redlines during deals and renewals
• Write and maintain scripts and automations for security workflows, leveraging AI-supplemented tooling where appropriate
• Keep leaders informed of Security Risks, including facilitating monthly Security review meetings and our Quarterly Security, Risk, & Compliance Committee meetings with executive leadership team
• Serve as the organization’s go-to technical security advisor, staying current on emerging incidents, trends, and threat analysis
• Partner with engineering leadership to evaluate AI and LLM security risks, contribute to responsible AI usage policies, and implement controls for AI tools and integrations used across the platform

Requirements

• 8+ years of experience in information security, with demonstrated breadth across security engineering, incident response, compliance, and infrastructure security
• A track record of operating independently in a fast-paced SaaS environment, making judgment calls without waiting for escalation
• Working knowledge of compliance frameworks including SOC2 and CMMC with experience owning or significantly contributing to audit readiness
• Strong written communication skills, with the ability to write polished security questionnaire responses and communicate clearly with customers, vendors, and internal stakeholders
• Scripting capability (PowerShell, Python, or equivalent) to automate security workflows, not expected to be a full-time developer
• Cross-functional influence, you are as comfortable advising an engineering team on a design review as you are briefing an executive on risk posture
• Prioritized ability to take full ownership in ambiguous environments, working independently to identify priorities, solve problems, and drive outcomes with lean resources
• Proven ability to separate signal from noise and advise the business on security issues that create meaningful exposure
• Balanced, business-minded approach to security, weighing risk, urgency, customer commitments, and company priorities to recommend practical paths forward

Qualifications

• Experience creating AI Agents to automate and assist with tasks
• Experience with the Microsoft security stack: Defender, Entra ID, Intune, and M365 security capabilities
• Experience evaluating AI/LLM security risks, including prompt injection, model misuse, data exposure, and agentic AI threats
• Experience with vulnerability management tooling such as Rapid7 or similar platforms
• Familiarity with CMMC and FedRAMP requirements or experience supporting federal customers

Skills

• Technical Skill: Performance-driven standard across everything we build and deliver
• Will: Hungry, humble, and smart; take ownership, seek growth, and elevate one another through curiosity, accountability, and collaboration
• Thrill: Stay connected and bring energy to the work; meaningful relationships and celebrating wins together fuel great outcomes

Benefits

• Comprehensive health, dental, and vision insurance
• 401(k) with employer match
• Flexible Time Off (FTO) + 10 paid holidays
• Opportunity to help shape an early, fast-growing market
• A flexible, remote-first work environment that empowers you to perform at your best, wherever you are
• An incredible culture built on trust, accountability, and collaboration across time zones and teams

Pay

Base Salary Range: $184,000 - $230,000 USD (depending on experience and location)

Variable Compensation: Eligible for annual performance bonus

Equity: Stock options included as part of total compensation package

Schedule

Remote-first within the United States, with optional access to our Arlington, VA HQ. Occasional travel may be required for team summits, customer engagements, or industry events.

Additional Information

Equal Opportunity Employer: interos.ai is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees regardless of race, religion, gender identity, sexual orientation, age, disability, or veteran status.

Accessibility & Accommodations: We are committed to providing reasonable accommodations for candidates throughout the hiring process. If you need assistance, please contact us at hr@interos.ai.