{"id":3548406,"url":"https://alion.io/job/peoplefinders-information-security-lead","title":"Information Security Lead","company":{"id":3620,"name":"PeopleFinders","domain":"peoplefinders.com","url":"https://alion.io/company/peoplefinders","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sacramento, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Snowflake","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false},{"name":"VPN","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Angular","optional":true},{"name":"Kubernetes","optional":true},{"name":"Node JS","optional":true},{"name":"SIEM","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-30T21:21:36Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-11T09:02:26Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"PeopleFinders.com, the premier online service for consumers to locate, contact and verify people and businesses. Over the past couple of decades the Company has quietly become one of the largest owners of public records data in the country, distributing its products over a vast network of websites.\nAbout PeopleFinders\nPeopleFinders.com provides people search, public records, background information, and property data services to millions of customers. Our platforms process large volumes of sensitive data and serve high-traffic consumer websites.\nPosition Overview\nThe Information Security Lead owns day-to-day security for PeopleFinders’ applications, infrastructure, and internal systems, from detecting and responding to threats to building durable controls with engineering teams. The role leads incident response, turns new vulnerabilities and threat intelligence into clear “are we affected” answers and remediation plans, and keeps leadership informed with proportionate, evidence-based updates.\nThis is a hands-on role for someone who thinks like an attacker, verifies before acting, and gets changes done through collaboration.\nSalary - $150k-$165k\nResponsibilities\nThreat detection and incident response\nLead investigations of security alerts and incidents end to end: scoping, evidence collection and preservation, containment, root-cause analysis, and corrective actions.\nCoordinate with the managed detection and response provider, triage escalations, and track findings to closure.\nWrite clear status updates and post-incident reports for leadership, engineering, and external parties where needed.\nMaintain incident response procedures, runbooks, and evidence-handling practices.\nVulnerability and threat response\nAssess newly disclosed vulnerabilities and supply-chain events against our environment within hours (applications, containers, cloud, network devices, endpoints), separating real exposure from headline severity.\nRun vulnerability scanning and external scanning programs, coordinate penetration tests, and track remediation against defined timelines.\nTrack vendor fixes and verify remediation once deployed.\nApplication, API, and abuse protection\nProtect web applications and APIs; review architecture, authentication flows, and code changes for security risk.\nLead bot mitigation, scraping prevention, fraud signals, rate limiting, and traffic analysis using Cloudflare, DataDome, or similar platforms.\nAssess and monitor third-party JavaScript, advertising, and tag-management content on consumer sites.\nPartner with developers on secure coding, OWASP risks, and remediation, and integrate security checks into CI/CD (SAST, dependency, and container scanning).\nCloud, container, and data platform security\nSecure AWS environments, including identity, logging, threat detection, and configuration baselines, and containerized workloads, including base-image hygiene and scanning.\nHelp secure data platforms such as Snowflake, SQL Server, MongoDB, and data pipelines, with emphasis on access control and sensitive-data protection.\nNetwork, remote access, and endpoint security\nManage firewall, VPN, and remote-access security, including MFA, session policy, lockout standards, and threat-prevention content.\nEnforce device and endpoint standards (managed devices, EDR and antivirus coverage, patching) and close coverage gaps.\nIdentity and access management\nDrive least-privilege access, MFA, secrets management, privileged-access controls, and periodic access reviews across directory, cloud, and SaaS platforms.\nGovernance, risk, and compliance\nMaintain security policies and the policy-exception process, and apply policy to real decisions such as remote access, offboarding and equipment, and personal devices.\nSupport SOC 2, PCI DSS, and privacy obligations with evidence, audit responses, and control improvements.\nConduct vendor security reviews, and evaluate and help select security tools and services.\nCommunication and enablement\nTranslate security risk into plain-language options and trade-offs for executives and engineering leaders, leaving decisions with the owners.\nDocument decisions and changes in the ticketing system and keep a durable record of outcomes.\nPromote security awareness and build safe automation and AI-assisted tooling that extends the team’s reach.\nRequired Qualifications\n5+ years in information security, with hands-on experience across at least three of: incident response, cloud security, application security, network security, vulnerability management.\nExperience leading security incidents from detection through root cause and reporting.\nHands-on experience securing AWS and internet-facing web applications and APIs; working knowledge of OWASP risks.\nExperience with firewalls and VPN/remote-access security, and with endpoint protection (EDR/AV) and device management.\nExperience with WAF, bot management, DDoS protection, and CDN security.\nStrong log analysis skills across firewall, application, cloud, and identity sources.\nWorking knowledge of IAM, MFA, encryption, and secrets management.\nExperience supporting SOC 2, PCI DSS, or similar compliance programs.\nScripting and API skills (Python, PowerShell, or similar) for investigation and automation.\nExcellent written communication, including executive-level updates.\nAbility to prioritize by business impact and likelihood, and to explain that reasoning.\nPreferred Qualifications\nExperience protecting high-traffic consumer sites from automated abuse and scraping (Cloudflare, DataDome, or similar).\nExperience with managed detection and response, SIEM, EDR, CSPM, SAST/DAST, and dependency or container scanning.\nExperience with containers and Kubernetes (EKS/ECR or similar).\nFamiliarity with Snowflake, SQL Server, MongoDB, or large-scale data platforms.\nFamiliarity with Java, JavaScript/Node.js, Angular, Python, or similar stacks.\nKnowledge of privacy requirements for consumer data, people-search, or data-broker businesses.\nCertifications such as CISSP, GIAC, AWS Security Specialty, PCNSE, or Security+, or equivalent practical experience.\nWhat Success Looks Like\nIncidents are handled quickly and thoroughly, with clear ownership and documented root cause.\nNew critical vulnerabilities get an exposure answer within a day, and remediation is tracked to completion within defined timelines.\nAutomated abuse and scraping are detected and mitigated, and the controls are measured and tuned.\nCloud, application, network, and endpoint controls are documented, measurable, and improving, with coverage gaps closing.\nLeadership receives timely, proportionate updates and can make decisions without chasing details.\nEngineering teams see security as a practical partner.\nOther\nCompensation range:[to be set with HR; required in many US states for remote postings]\nBackground check: Must pass a background check.\nOn-call:[confirm whether the role participates in an on-call or after-hours incident rotation]\nBenefits\nFlexible PTO\n6% 401K match\n100% of the cost paid for the employee for medical, dental and vision\n75% of the cost paid for dependents for medical, dental and vision","description_format":"text","description_chars":7116,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Providers & Datasets","Online Tools & Utilities"],"lifecycle":[{"event":"open","at":"2026-10-30T21:39:20Z"}],"visa":[],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.849,"p_room":1,"age_days":11,"expected_fill_days":33,"reasons":["conf:1","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/peoplefinders-information-security-lead","json_url":"https://alion.io/job/peoplefinders-information-security-lead.json","meta":{"generated_at":"2026-11-11T09:33:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15927,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3620},"rest":"https://alion.io/mcp/rest/get_company?id=3620"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpeoplefinders-information-security-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpeoplefinders-information-security-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpeoplefinders-information-security-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/peoplefinders-information-security-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpeoplefinders-information-security-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3548406}},{"tool":"search_jobs","arguments":{"company":"peoplefinders.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3548406},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}