Information Security Engineer III

What we’re looking for

The Information Security Engineer III reports to the Sr. Information Security lead and is primarily focused on security. The position joins a dynamic team responsible for safeguarding our cloud infrastructure, endpoints, network, and data. We’re hiring to expand our capacity and capabilities in key areas such as cloud security posture management, vulnerability remediation, endpoint detection and response (EDR), incident response, and network security technologies like Zscaler. This is an exciting opportunity to make a real impact, working with cutting-edge security tools and collaborating across teams to protect a compliance-driven, cloud-first environment.

What you’ll be working on

• Drive vulnerability management efforts by identifying and coordinating remediation of security findings across cloud and endpoint environments.
• Manage and optimize Cloud Security Posture Management (CSPM) tools such as AWS Security Hub, GuardDuty, and Inspector, leveraging automation to accelerate compliance checks and configuration drift detection.
• Maintain and enhance Endpoint Detection and Response (EDR) capabilities, including hosting group management, tuning policies and supporting investigations with tools like CrowdStrike, while automating visibility, alert enrichment, and response actions.
• Support secure access and traffic inspection using Zscaler by maintaining or defining policies, troubleshooting application flows
• Improve data protection and operational efficiency through automation.
• Participate in an on-call rotation for Incident Response, providing timely support and resolution for security events outside of regular business hours.

We’d love to hear from people with

• 5+ years of hands-on experience in information security, with a focus on cloud security, vulnerability management, endpoint and network protection, and data protection in enterprise environments.
• Experience working with security tools such as AWS Security Hub, GuardDuty, Inspector, CrowdStrike, and Zscaler.
• Proficiency in scripting or automation frameworks (Python, etc.) to streamline security operations and reporting.
• Security certifications such as CISSP, GSE C, or AWS Security Specialty are a strong plus.
• Strong collaboration, communication, and stakeholder engagement skills, with the ability to work cross-functionally with engineering, IT, and compliance teams.

SurveyMonkey believes in-person collaboration is valuable for building relationships, fostering community, and enhancing our speed and execution in problem-solving and decision-making. As such, you will be required to work from a SurveyMonkey office up to 1 day per week.

#LI - Hybrid