Information Security Engineer

About Yondr

Yondr is a forward-thinking organization disrupting the data center space by offering innovative solutions to complex capacity demands worldwide. With rapid growth fueled by serving the largest technology firms globally, Yondr is seeking talented individuals to join its mission for a future without barriers.

Role Overview

The Information Security Engineer will join Yondr's Global Technology Security team and bring extensive expertise in developing and managing modern information security practices within a global environment. This role demands hands-on involvement with security technology, risk assessments, compliance, and continuous improvement of security processes to safeguard the organization.

Key Responsibilities

• Advance Yondr's information security standards to align with industry best practices, corporate policies, and regulatory demands.
• Operate and enhance security technologies and processes actively.
• Perform investigations and respond to cybersecurity and information security incidents.
• Provide consultative guidance and training to promote security best practices across teams.
• Collaborate with stakeholders to ensure all projects and IT operations comply with security policies and standards.
• Manage third-party penetration testing and oversee remediation efforts afterward.
• Serve as the subject matter expert for information security topics relating to Yondr.
• Conduct risk assessments of third-party suppliers to verify compliance with security standards and risk tolerances.
• Oversee phishing platforms, training initiatives, and generate relevant reports.
• Offer expertise on audit processes, controls, and continuous security improvement activities.
• Drive vulnerability assessments, risk analysis, and remediation to control the organization's attack surface.
• Perform periodic Identity and Access Management entitlement reviews on critical platforms and applications.
• Participate in audits, compliance checks, and address regulatory security requirements.
• Keep thorough documentation on security processes, incidents, and compliance efforts.

Required Qualifications and Experience

• At least five years of information security experience in medium to large global organizations.
• Proven track record in leading and maintaining effective information security control assurance programs.
• Comprehensive knowledge of regulatory standards including ISO27001, SOC2, and PCI DSS.
• Strong communication and stakeholder management skills across technical and senior business audiences.
• Applied understanding of networking principles and OSI model to evaluate controls and support security incident investigations.
• Experience supporting 24/7 global operational environments.
• Familiarity with operational technology (OT), networks, and Zero Trust architecture concepts.
• Competence with email security, vulnerability management, penetration testing, and remediation methodologies.
• Proficient analytical, troubleshooting, and problem-solving capabilities.
• Hands-on experience with Microsoft Sentinel, Qualys, Microsoft Defender, and Knowbe4 platforms is essential.
• Familiarity with Microsoft Purview, Managed Detection and Response (MDR) services, User Behavior Analytics (UBA), and IT/OT network environments is beneficial.
• Excellent verbal and written communication skills.
• The ability to manage multiple priorities efficiently and work autonomously or in teams.

Preferred Certifications

• CISSP
• Security+
• CISA
• CEH
• GSEC
• Microsoft Certifications

Diversity and Inclusion

Yondr actively fosters an inclusive culture prioritizing diversity, equity, and belonging, encouraging applicants from all backgrounds, nationalities, and identities. The company maintains equitable hiring processes and supports a safe, welcoming workplace with inclusive benefits to ensure all employees thrive.