The Director, Security Engineering & Operations leads and hands-on manages Payscale’s security engineering and security operations functions across corporate, cloud, and hosting environments. Responsibilities include designing and hardening controls, building security automation and integrations (SOAR, detection-as-code, IaC guardrails), operating the security tooling stack (EDR/XDR, SIEM, DLP/CASB), driving detection and incident response (including incident command), owning vulnerability and exposure management, and managing the MDR relationship. The role requires 10+ years in information security with 4+ years in a lead/management role and expertise with CrowdStrike, SIEM/SOAR orchestration, cloud (AWS), zero-trust, scripting/automation, and MITRE ATT&CK.

Payscale seeks a GRC Analyst II to maintain data and system classification programs, coordinate SOC 2 and other audit activities, conduct vendor security assessments, manage policy lifecycle and identify control gaps. Requires 2+ years of GRC or information security experience in a commercial SaaS/software environment and familiarity with frameworks such as SOC 2, ISO 27001, NIST 800-53, or CIS.