Junior Security Engineer, GRC

Human risk remains one of the biggest vulnerabilities and traditional awareness training is not enough. We take a different

approach by combining AI-driven personalization, real threat detection, and behavioral science to actively protect people and

organizations.

We are looking for a Junior Security Engineer, GRC to join Hoxhunt's Product Security team. In this role, you will act as a

quarterback to support customer trust by helping with the security questionnaires and RFPs that unblock sales deals, seeing each

case through with guidance from senior teammates. You will also play a key role in our compliance footprint by helping collect and

validate evidence across the frameworks we operate under (SOC 2 Type II, ISO 27001, ISO 42001, HIPAA), and you will learn to run

the day-to-day coordination of our vulnerability management program and our recurring security activities. This is an excellent

opportunity to build a career at the intersection of information security and business within a fast-growing SaaS company, with

modern tooling and automation doing the heavy lifting. This is a growth role for someone with ambition. We hire juniors we expect

to grow quickly, and we invest in making that happen by providing real ownership from week one and experienced mentors to support

you.

• Quarterback RFP and security questionnaire responses: See each case you take through, end-to-end, with guidance from senior

teammates. Triage the request, draft high-quality responses using our answer library and tooling, coordinate input from

technical experts when needed, and drive it through to submission.

• Support continuous compliance: Help manage the evidence flow across SOC 2 Type II, ISO 27001, ISO 42001 and HIPAA. Validate

evidence collected continuously through Vanta, handle manual needs, and work with engineers to automate processes to stay

continuously audit-ready.

• Learn to run the vulnerability management coordination cadence: Review dashboards and automated triage output weekly, route

findings to the code owners, track remediation against our CVSS-based SLAs, escalate when needed, and report on status.

• Coordinate our recurring security activities: Help manage the regular calendar including coordinating penetration testing with

external partners, access and policy review cycles, and subprocessor reviews.

• Maintain our security knowledge base and sales collateral: Keep the answer library comprehensive, accurate, and current, and

maintain external-facing security documentation that supports the sales process.

• Close the loop: Track security-questionnaire outcomes, collect lessons learned from each RFP cycle, and feed recurring gaps

back to Product, Sales, and the security team.

• Support compliance reporting and external audits: Help prepare quarterly compliance status reporting for the Senior Management

Team, keep procedures and policies documented, organize evidence for external audits, and help maintain our AI Management

System.

• Contribute to security improvements: Research, propose, and deliver improvements to security controls, and collaborate on

security automation initiatives with our engineers.

• In your first 3 months you'll: Get up to speed with our existing security answer library and compliance tooling, start helping

with incoming security questionnaires and RFPs, and begin learning the vulnerability management cadences and recurring security

activities.

• By month 6 you'll: Smoothly support continuous compliance and evidence validation, actively partner with engineers to automate

manual compliance tasks, confidently see RFPs through to submission with guidance from your team, and contribute to

improvements in our security controls and knowledge base.

• A genuine desire to work in compliance and with customers. This role is customer-facing security work at its core and requires

someone who truly wants to do this work.

• Excellent written English with rigorous attention to detail to ensure every customer-facing answer is clear, accurate,

professional, and error-free.

• Organizational and project-management ability to coordinate RFP execution by identifying the right internal stakeholders,

gathering their input, and keeping everyone on deadline.

• An understanding of compliance frameworks (SOC 2, ISO 27001, ISO 42001, HIPAA, NIST) or a strong willingness to learn them

quickly.

You don't need to meet every qualification on day one. Three things are non-negotiable: you want to work in compliance and with

customers, you use AI to accelerate everything you do, and you teach yourself what you don't know. If that's you, we'd like to

hear from you even if the rest is still growing.

You will work daily with the Product Security team, whose shared job is to address any security concern a product team or customer

raises. You will not start from scratch or work alone; the team behind you includes experienced colleagues who own the frameworks

and engineers who build the automation you run. You will report to the Director of Product Security, collaborating closely with

Sales, Product, and external partners in an environment where continuous learning and automation are the default.

• Compensation: Monthly salary of €3,000 - €4,000 depending on your experience. You may notice varying salary ranges for roles

with similar titles across Hoxhunt; this is because each range is grounded in our role leveling and reflects the seniority,

scope, and impact expectations required for that specific role and team, and we operate with a low hierarchy.

• High performance meets high humanity: We bring an incredibly driven, high-impact energy to our work, but we leave our egos at

the door. You will be surrounded by wildly talented, dedicated colleagues in an environment built on extreme kindness, support,

and psychological safety.

• Authentic trust & autonomy: We hire great people and trust them to do great work. You will find a culture free of

micromanagement, giving you the autonomy to take real ownership, drive impact, and shape things early on.

• A product you can be proud of: It is incredibly rare in cybersecurity to build a product that end-users genuinely love. You

will join a fast-paced, technically sophisticated team making a real, measurable impact against cybercrime.

• The perks that matter: Alongside this amazing community, you will enjoy extensive healthcare with other benefits and our

beautiful office in Helsinki (complete with a gym and swimming pool!).

Hoxhunt was founded in 2016 by four visionaries. Today we are a global team of +300 amazing Hoxhunters advancing a truly AI-native

category leader in human risk management, with key hubs in the United States, the United Kingdom, Singapore, and Finland. We are

proud to be an award-winning, fast-growing software company, recognized by G2 and Gartner, named to TIME Magazine's list of the

World's Top EdTech Companies, and featured for our innovation in major publications like Fast Company, TechCrunch, Forbes, and

Inc.

As a multi-product company, Hoxhunt goes beyond traditional security awareness. We don't just educate employees through frequent,

personalized, and behavior-changing cybersecurity training - we also actively build real threat intelligence and response tools

that protect organizations against malicious cyberattacks every single day.

Be among the first to know about our open positions. Drop your details in our Talent Community, and we will reach out when there

is a match!