Information Security Engineer

📋 Job Overview

It's a new day with a new opportunity at 8am! The Information Security Engineer ensures the security and integrity of 8am’s systems, with a focus on cloud security operations, detection engineering, incident response, and data protection. This role is the hands-on technical backbone of the security program: you will operate and improve our detection and response stack, lead technical investigation of security events, and partner with engineering teams to embed security across our platforms.

🏢 About 8am

8am builds software that helps professionals run stronger businesses. Our platform powers payments, client experience, and operational workflows for legal, accounting, and other service-based businesses. U.S. based professionals count on our purpose-built solutions to simplify operations, ensure compliance, and fuel profitable growth, so they can focus on their clients and do more of the work that matters. More than 250,000 professionals across the U.S. rely on our products every day. As we continue to grow, we’re investing in the next generation of our platform and are looking for experienced engineers who want to help shape its future.

🎯 The Role

The Information Security Engineer ensures the security and integrity of 8am’s systems, with a focus on cloud security operations, detection engineering, incident response, and data protection. This role is the hands-on technical backbone of the security program: you will operate and improve our detection and response stack, lead technical investigation of security events, and partner with engineering teams to embed security across our platforms.

✅ Key Responsibilities

• AWS security operations: Manage AWS security posture — identify vulnerabilities, triage findings (GuardDuty, Security Hub), drive remediation with owning teams
• Detection engineering: Operate/extend EDR and SIEM — maintain endpoint coverage, author detection queries/dashboards, tune alerts, investigate suspicious activity
• Incident response & forensics: Lead hands-on IR — investigation, containment, forensic analysis, remediation, and post-incident reviews
• Vulnerability management: Run operational cadence — scanner curation, severity SLAs, remediation tracking, code/secret scanning triage
• Security awareness & internal ops: Manage KnowBe4 phishing tests/training with Compliance
• Platform security: Support WAF monitoring, IaC security review, and cloud account hygiene across multi-account environment
• Data privacy & compliance support: Collaborate on data mapping/DLP/classification, and on compliance controls (PCI ASV scans, Vanta tests)
• Product security & documentation: Advise on customer-facing/product security questions; maintain runbooks so work is reproducible by any teammate

📌 Required Qualifications

• 4+ years in security engineering or security operations, with real incident response experience.
• Strong AWS security knowledge (IAM, logging, GuardDuty/Security Hub, multi-account patterns).
• Proficiency with SIEM query languages, detection tuning, and at least one scripting language (Python preferred).
• Experience with vulnerability management tooling and remediation SLA programs.
• Comfortable operating independently in a distributed team; strong written English.
• Demonstrated experience leveraging AI tools and technologies to improve workflows, enhance decision-making, or drive innovation.

⭐ Desirable Experience

• PCI DSS or SOC 2 environment experience; ASV scan operations.
• Terraform/IaC security review experience.
• Exposure to securing AI-assisted development or agentic tooling.

🎁 Benefits

• The monthly gross salary range for this position is CZK 90,000 to CZK 160,000.
• Performance bonus opportunities and employee referral rewards
• Flexible Time Off (FTO) and 13 paid public holidays aligned with the Czech calendar
• Paid sick leave with additional support through the Czech social security system
• Maternity, paternity, and parental leave in line with Czech regulations, plus additional paid paternity leave from 8am
• Full statutory benefits, including public health insurance, social security, pension, and work accident coverage

🛂 Visa & Eligibility

• This role is hired through an Employer of Record (EOR) partner in the Czech Republic.