[All remote jobs](https://jobicy.com/jobs.md)[![Five9 logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/7c3d754e-221.png)](https://jobicy.com/company/five9.md)[Five9](https://jobicy.com/company/five9.md) # Staff Information Security Engineer Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/five9.md)ShareRemote from[Portugal](https://jobicy.com/job-region/portugal.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished12 Oct 2026Apply before11 Nov 2026Listing views33Application actions3Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. This Staff Information Security Engineer role owns the operational maturity of Five9's cyber resiliency program while providing senior technical support to cloud security initiatives. The position combines program governance, risk prioritization, executive reporting, and cross-functional remediation leadership with hands-on multi-cloud security engineering. Core technical expectations include GCP expertise, Terraform, CI/CD, IAM, network and workload security, and policy-as-code. The successful candidate will influence engineering teams without direct authority and translate resilience and risk data for leadership audiences. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a staff-level position requiring both deep cloud-security engineering capability and ownership of a cross-organizational resilience program. The candidate must independently prioritize risk, establish governance, and drive remediation across teams while communicating effectively with executives. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job medianMarket rate$180,000US market range$155k–$220k0$242k AI insightNo actual salary is disclosed in the posting. These are estimated annual US-market base-salary figures in USD for a Staff Information Security Engineer with cloud security, cyber resiliency, Terraform, and multi-cloud responsibilities; bonus and equity may increase total compensation. ## Core skills Skills and capabilities most closely associated with this opportunity. [Cybersecurity](https://jobicy.com/jobs?search_keywords=Cybersecurity.md)[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[Cyber Resilience](https://jobicy.com/jobs?search_keywords=Cyber%20Resilience.md)[GCP](https://jobicy.com/jobs?search_keywords=GCP.md)[AWS](https://jobicy.com/jobs?search_keywords=AWS.md)[Microsoft Azure](https://jobicy.com/jobs?search_keywords=Microsoft%20Azure.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[CI/CD](https://jobicy.com/jobs?search_keywords=CICD.md)[IAM](https://jobicy.com/jobs?search_keywords=IAM.md)[Security Governance](https://jobicy.com/jobs?search_keywords=Security%20Governance.md) Sample interview questionsHow would you build and operationalize a cyber resiliency program from an early-stage or fragmented state?I would begin by defining the asset inventory, ownership model, criticality tiers, and the resilience signals to be measured. Next, I would establish documented triage, remediation SLA, exception, escalation, and quarterly-review processes, then integrate findings into the engineering workflow such as Jira. I would publish clear scorecards that show risk exposure, remediation velocity, coverage, and trends by criticality so leaders can make informed trade-offs. How do you prioritize cloud security or resilience findings across a large multi-cloud environment? I use a risk-based model that combines asset criticality, environment, exploitability, severity, data sensitivity, external exposure, compensating controls, and remediation effort. A critical production service with an internet-exposed privilege issue receives substantially higher priority than the same issue in a nonproduction environment. The model should be transparent and consistently applied so engineering teams understand why work is prioritized. Describe how you would use Terraform and CI/CD to improve cloud-security guardrails. I would encode approved security baselines as reusable Terraform modules and policy-as-code controls, including IAM boundaries, encryption, logging, network segmentation, and workload requirements. CI/CD pipelines should run infrastructure validation, security-policy checks, and drift detection before deployment. This shifts control enforcement earlier in the lifecycle while producing auditable evidence of compliance. How would you drive remediation when the responsible engineering team does not report to you? I would first ensure the finding is actionable by clearly communicating impact, affected assets, priority rationale, remediation options, and deadlines. I would partner with the team's technical lead to identify blockers and fit the work into their delivery plan, then track progress through agreed workflows and escalate only when material risk or SLA commitments require it. Credibility, transparent metrics, and a collaborative approach are essential for sustained influence. What metrics would you present to executive leadership on cyber resiliency? I would report resilience posture trends, percentage of critical assets covered, open risk by criticality tier, SLA compliance, remediation velocity, mean age of findings, recurring control failures, and exception volume. I would connect the metrics to business services and material risk, rather than presenting raw vulnerability counts alone. The reporting should highlight decisions needed from leadership and demonstrate whether the program is reducing risk over time. Opportunity details ## About this role. Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values everyday results in our team-first culture and enables us to innovate, grow, and thrive while enjoying the journey together. We celebrate diversity and foster an inclusive environment, empowering our employees to be their authentic selves. We are seeking a Staff Information Security Engineer to join Five9’s Information Security team. This role will own the operationalization and ongoing maturity of Five9’s Cyber Resiliency program (the practice of using tooling to continuously identify, prioritize, and remediate infrastructure resilience issues across our AWS, GCP, Azure cloud environments). You’ll be responsible for program governance, tool ownership, process development, and engineering engagement to scale the program across the organization. As secondary responsibilities, you will support the Cloud Security program as a senior technical resource. Key Responsibilities: Cyber Resiliency Program (Primary) * Own the operational lifecycle of the Cyber Resiliency program, including tool administration, system and resource mapping, criticality tiering, and issue triage workflows * Develop and maintain program governance: process documentation, SLAs for remediation, escalation paths, and quarterly review cadences * Build executive reporting for security and engineering leadership: resilience score trends, remediation velocity, IaC coverage, and risk exposure by system criticality tier * Drive the communication plan for the program, ensuring engineering teams understand expectations before receiving remediation tickets * Define and maintain issue prioritization frameworks that balance system criticality, environment, severity, and remediation effort * Partner with engineering leads to drive remediation of infrastructure resilience issues, removing blockers and tracking progress through Jira Cloud Security (Supporting) * Partner with the Cloud Security team on architecture reviews, policy development, and strategic initiatives across GCP, AWS, and Azure * Develop and refine security guardrails, policy-as-code, and automated detection and response capabilities for cloud misconfigurations * Evaluate and improve cloud security posture including IAM architecture, network segmentation, and workload protection * Ensure cloud security solutions are under configuration management and deployed through CI/CD pipelines Requirements: * 5+ years of experience in information security, with demonstrated experience in a senior technical role * Experience operationalizing a security program or service: building governance, processes, and reporting, not just executing within an existing framework * Deep hands-on experience with at least one major cloud platform (GCP strongly preferred), including IAM, networking, compute, and storage security * Strong experience with infrastructure-as-code (Terraform required) and CI/CD pipelines * Demonstrated ability to drive remediation and risk reduction across engineering teams without direct authority * Experience building executive-level security reporting and metrics * Excellent communication skills: able to present program status and risk to engineering leadership, security leadership, and executive audiences * Self-directed with the ability to manage competing priorities across program operations and supporting workstreams Preferred Skills: * Experience with cyber resilience or infrastructure resilience tooling (Gambit, Wiz, or similar CSPM/CNAPP platforms) * Experience conducting risk assessments or security maturity assessments using frameworks such as NIST CSF, ISO 27001, or CMMI * Background in Kubernetes security and container workload protection * Experience with multi-cloud environments (GCP + AWS + Azure) * Python scripting for automation and tooling * Security certifications (CISSP, CCSP, SANS certifications, or similar) * Prior experience in a SaaS, contact center, or communications platform environment * Experience mentoring or technically leading junior engineers Workplace location: This role is fully remote for candidates who reside outside Porto, Maia, Matosinhos, Gondomar, Valongo e Vila Nova de Gaia. Candidates who reside within those municipalities would be required to work in-office 3 days a week. Benefits: * Five9 Shares * Bonus Scheme * 10% Flex Benefit * Meal Allowance * Medical Insurance * Life Insurance * 25 day Annual Leave + Public Holidays Five9 embraces diversity and is committed to building a team that represents a variety of backgrounds, perspectives, and skills.  The more inclusive we are, the better we are.  Five9 is an equal opportunity employer. Five9 is committed to providing reasonable accommodations for qualified individuals with disabilities throughout the application and interview process. If you need assistance or an accommodation due to a disability, please contact us at accommodations@five9.com to request an accommodation. Requests will be handled confidentially and in accordance with applicable law. View our privacy policy, including our privacy notice to California residents here: [https://www.five9.com/pt-pt/legal](https://www.five9.com/pt-pt/legal). Note: Five9 will never request that an applicant send money as a prerequisite for commencing employment with Five9. Show more [Apply now >](https://jobicy.com/jobs/155070-staff-information-security-engineer.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Stripe logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/WRILS-201011073943-272457.png) Stripe Oct 12 New ### [Abuse Research Engineer](https://jobicy.com/jobs/153053-abuse-research-engineer.md) Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 11 New ### [Senior / Staff Intelligence Analyst, Environmental Crimes](https://jobicy.com/jobs/155032-senior-staff-intelligence-analyst-environmental-crimes.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Databricks logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/4e3f864ba9cf3c62d471e1c62414d098.jpg) Databricks Oct 11 New ### [Staff Security Engineer, Incident Response](https://jobicy.com/jobs/155021-staff-security-engineer-incident-response.md) RDQ327R180 Staff Security Engineer, Incident Response The Incident Response team’s mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a… * ![Resilience logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e67f0de9-221.png) Resilience Oct 11 New ### [Tabletop Exercise (TTX) Specialist – Cybersecurity Focus](https://jobicy.com/jobs/154999-tabletop-exercise-ttx-specialist-cybersecurity-focus.md) About Us At Resilience, we’re creating a new category that integrates cybersecurity, cyber insurance, and cyber risk management. Founded in 2016 by experts from across the highest tiers of the… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Oct 11 New ### [Blockchain Security Expert – Chain Security Evaluation Track](https://jobicy.com/jobs/152970-blockchain-security-expert-chain-security-evaluation-track.md) About You You’re a self-starter who thrives on tackling the toughest and most meaningful problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Oct 11 New ### [Blockchain Security Expert Intern – AI Track](https://jobicy.com/jobs/152979-blockchain-security-expert-intern-ai-track.md) About the Company Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Oct 11 New ### [Blockchain Security Expert – Security Audit Track](https://jobicy.com/jobs/152975-blockchain-security-expert-security-audit-track.md) About You You’re a self-starter. You believe in tackling the most important problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand that #startuplife… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Oct 11 New ### [Blockchain Security Expert – Anti Defect Track](https://jobicy.com/jobs/152966-blockchain-security-expert-anti-defect-track.md) About the Company Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain… * ![Synthesia logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/c69aad11-221.webp) Synthesia Oct 11 New ### [SecOps Security Engineer (Staff-level, L6)](https://jobicy.com/jobs/152968-secops-security-engineer-staff-level-l6.md) Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and… * ![Vercel logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/a6aded72-221.png) Vercel Oct 10 ### [Security Engineer, Cloud](https://jobicy.com/jobs/152929-security-engineer-cloud.md) About Vercel: Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. For more than a decade, Vercel has shaped how the web is built…. [Browse all jobs](https://jobicy.com/jobs.md)