Principal, Information Security

WHAT YOU'LL DO Own and operate the security tooling stack end to end, including identity and Zero Trust management; endpoint management; network security controls; vulnerability management; and security monitoring and logging • Lead incident response from initial triage through containment, investigation, root cause analysis, and post-mortem documentation • Own disaster recovery planning and lead DR and incident response tabletop exercises to validate business continuity and incident readiness • Plan and lead red team / purple team exercises to validate security controls and stress-test incident response readiness • Manage third-party penetration testing engagements, tracking findings by severity, coordinating remediation with Engineering, and overseeing the retest cycle • Work closely with the Engineering and Platform team on architecture and design reviews, providing security guidance on new features, integrations, and infrastructure changes • Harden cloud and on-premises environments, managing IAM policies, endpoint protection, and network security controls • Work with contractors and external security partners to maintain SOC2 and CMMC compliance posture, including managing the control environment, coordinating evidence collection, and tracking remediation across teams • Handle customer-facing and vendor-facing security questionnaires independently, translating interos.ai’s security posture into clear, polished written responses • Review customer and prospect contracts for security terms, including DPAs and security addendums, partnering with Legal on redlines during deals and renewals • Write and maintain scripts and automations for security workflows, leveraging AI-supplemented tooling where appropriate • Keep leaders informed of Security Risks, including facilitating monthly Security review meetings and our Quarterly Security, Risk, & Compliance Committee meetings with executive leadership team. • Serve as the organization’s go-to technical security advisor, staying current on emerging incidents, trends, and threat analysis • Conduct vendor risk management on third-party tools and services prior to internal adoption, including the fast-growing category of AI and LLM tools • Partner with engineering leadership to evaluate AI and LLM security risks, contribute to responsible AI usage policies, and implement controls for AI tools and integrations used across the platform WHAT YOU BRING • 8+ years of experience in information security, with demonstrated breadth across security engineering, incident response, compliance, and infrastructure security • A track record of operating independently in a fast-paced SaaS environment, making judgment calls without waiting for escalation • Working knowledge of compliance frameworks including SOC2 and CMMC with experience owning or significantly contributing to audit readiness • Strong written communication skills, with the ability to write polished security questionnaire responses and communicate clearly with customers, vendors, and internal stakeholders • Scripting capability (PowerShell, Python, or equivalent) to automate security workflows, not expected to be a full-time developer • Comfort with modern SaaS infrastructure, cloud environments, and identity and access management systems • Cross-functional influence, you are as comfortable advising an engineering team on a design review as you are briefing an executive on risk posture • Proven ability to take full ownership in ambiguous environments, working independently to identify priorities, solve problems, and drive outcomes with lean resources. • Strong risk judgment, with the ability to separate signal from noise and advise the business on security issues that create meaningful exposure. • Balanced, business-minded approach to security, weighing risk, urgency, customer commitments, and company priorities to recommend practical paths forward.

BONUS POINTS • Experience creating AI Agents to automate and assist with tasks • Hands-on experience with the Microsoft security stack: Defender, Entra ID, Intune, and M365 security capabilities • Experience evaluating AI/LLM security risks, including prompt injection, model misuse, data exposure, and agentic AI threats • Experience with vulnerability management tooling such as Rapid7 or similar platforms • Relevant certifications such as CISSP, GCIH, GCIA, CCSP, AWS Certified Security Specialty, AWS Certified Solutions Architect, or CAISP • Familiarity with CMMC and FedRAMP

requirements or experience supporting federal customers WHAT WE OFFER • Comprehensive health, dental, and vision insurance • 401(k) with employer match • Flexible Time Off (FTO) + 10 paid holidays • Opportunity to help shape an early, fast-growing market • A flexible, remote-first work environment that empowers you to perform at your best, wherever you are • An incredible culture built on trust, accountability, and collaboration across time zones and teams OUR CORE VALUES Technical Skill: We hold a performance-driven standard across everything we build and deliver. We value depth of expertise, strong judgment, and the ability to turn complex challenges into clear, effective solutions. Will: We show up hungry, humble, and smart. We take ownership, seek growth, and elevate one another through curiosity, accountability, and collaboration. Thrill: We stay connected and bring energy to the work. Meaningful relationships and celebrating wins together fuel great outcomes. ADDITIONAL INFORMATION Work Environment, Location, and Travel This role can be remote-first within the United States, with optional access to our Arlington, VA HQ. Occasional travel may be required for team summits, customer engagements, or industry events.

Compensation Base Salary Range: $184,000 - $230,000 USD (depending on experience and location) Variable

Compensation: Eligible for annual performance

bonus Equity: Stock options included as part of total

compensation package EQUAL OPPORTUNITY EMPLOYER interos.ai is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees regardless of race, religion, gender identity, sexual orientation, age, disability, or veteran status. ACCESSIBILITY & ACCOMMODATIONS We are committed to providing reasonable accommodations for candidates throughout the hiring process. If you need assistance, please contact us at [email protected]. Apply for this Position Go back to the job list powered by

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.