PeopleFinders.com, the premier online service for consumers to locate, contact and verify people and businesses. Over the past couple of decades the Company has quietly become one of the largest owners of public records data in the country, distributing its products over a vast network of websites.
About PeopleFinders
PeopleFinders.com provides people search, public records, background information, and property data services to millions of customers. Our platforms process large volumes of sensitive data and serve high-traffic consumer websites.
Position Overview
The Information Security Lead owns day-to-day security for PeopleFinders’ applications, infrastructure, and internal systems, from detecting and responding to threats to building durable controls with engineering teams. The role leads incident response, turns new vulnerabilities and threat intelligence into clear “are we affected” answers and remediation plans, and keeps leadership informed with proportionate, evidence-based updates.
This is a hands-on role for someone who thinks like an attacker, verifies before acting, and gets changes done through collaboration.
Salary - $150k-$165k
Responsibilities
Threat detection and incident response
Lead investigations of security alerts and incidents end to end: scoping, evidence collection and preservation, containment, root-cause analysis, and corrective actions.
Coordinate with the managed detection and response provider, triage escalations, and track findings to closure.
Write clear status updates and post-incident reports for leadership, engineering, and external parties where needed.
Maintain incident response procedures, runbooks, and evidence-handling practices.
Vulnerability and threat response
Assess newly disclosed vulnerabilities and supply-chain events against our environment within hours (applications, containers, cloud, network devices, endpoints), separating real exposure from headline severity.
Run vulnerability scanning and external scanning programs, coordinate penetration tests, and track remediation against defined timelines.
Track vendor fixes and verify remediation once deployed.
Application, API, and abuse protection
Protect web applications and APIs; review architecture, authentication flows, and code changes for security risk.
Lead bot mitigation, scraping prevention, fraud signals, rate limiting, and traffic analysis using Cloudflare, DataDome, or similar platforms.
Assess and monitor third-party JavaScript, advertising, and tag-management content on consumer sites.
Partner with developers on secure coding, OWASP risks, and remediation, and integrate security checks into CI/CD (SAST, dependency, and container scanning).
Cloud, container, and data platform security
Secure AWS environments, including identity, logging, threat detection, and configuration baselines, and containerized workloads, including base-image hygiene and scanning.
Help secure data platforms such as Snowflake, SQL Server, MongoDB, and data pipelines, with emphasis on access control and sensitive-data protection.
Network, remote access, and endpoint security
Manage firewall, VPN, and remote-access security, including MFA, session policy, lockout standards, and threat-prevention content.
Enforce device and endpoint standards (managed devices, EDR and antivirus coverage, patching) and close coverage gaps.
Identity and access management
Drive least-privilege access, MFA, secrets management, privileged-access controls, and periodic access reviews across directory, cloud, and SaaS platforms.
Governance, risk, and compliance
Maintain security policies and the policy-exception process, and apply policy to real decisions such as remote access, offboarding and equipment, and personal devices.
Support SOC 2, PCI DSS, and privacy obligations with evidence, audit responses, and control improvements.
Conduct vendor security reviews, and evaluate and help select security tools and services.
Communication and enablement
Translate security risk…