Junior Security Engineer, GRC

The role

We are looking for a Junior Security Engineer, GRC to join Hoxhunt's Product Security team. In this role, you will act as a quarterback to support customer trust by helping with the security questionnaires and RFPs that unblock sales deals, seeing each case through with guidance from senior teammates. You will also play a key role in our compliance footprint by helping collect and validate evidence across the frameworks we operate under (SOC 2 Type II, ISO 27001, ISO 42001, HIPAA), and you will learn to run the day-to-day coordination of our vulnerability management program and our recurring s… Quarterback RFP and security questionnaire responses: See each case you take through, end-to-end, with guidance from senior teammates. Triage the request, draft high-quality responses using our answer library and tooling, coordinate input from technical experts when needed, and drive it through to submission. Support continuous compliance: Help manage the evidence flow across SOC 2 Type II, ISO 27001, ISO 42001 and HIPAA. Validate evidence collected continuously through Vanta, handle manual needs, and work with engineers to automate processes to stay continuously audit-ready. Learn to run the vulnerability management coordination cadence: Review dashboards and automated triage output weekly, route findings to the code owners, track remediation against our CVSS-based SLAs, escalate when needed, and report on status. Coordinate our recurring security activities: Help manage the regular calendar including coordinating penetration testing with external partners, access and policy review cycles, and subprocessor reviews. Maintain our security knowledge base and sales collateral: Keep the answer library comprehensive, accurate, and current, and maintain external-facing security documentation that supports the sales process. Close the loop: Track security-questionnaire outcomes, collect lessons learned from each RFP cycle, and feed recurring gaps back to Product, Sales, and the security team. Support compliance reporting and external audits: Help prepare quarterly compliance status reporting for the Senior Management Team, keep procedures and policies documented, organize evidence for external audits, and help maintain our AI Management System. Contribute to security improvements: Research, propose, and deliver improvements to security controls, and collaborate on security automation initiatives with our engineers.

What we expect

• A genuine desire to work in compliance and with customers. This role is customer-facing security work at its core and requires someone who truly wants to do this work.
• Excellent written English with rigorous attention to detail to ensure every customer-facing answer is clear, accurate, professional, and error-free.
• Organizational and project-management ability to coordinate RFP execution by identifying the right internal stakeholders, gathering their input, and keeping everyone on deadline.
• An understanding of compliance frameworks (SOC 2, ISO 27001, ISO 42001, HIPAA, NIST) or a strong willingness to learn them quickly.
• An understanding of security controls and best practices, or the drive to build it fast.
• A self-motivated, continuous learning mindset where you actively teach yourself new frameworks, tools, and techniques.
• Currently pursuing or completed a Bachelor's or Master's degree in Information Security, IT, Business, or a related field.
• A mindset to use modern AI tools everywhere to expand and scale your reach, acting as a force multiplier.