Security Operations Engineer

Role overview Own security operations across cloud services, corporate IT, and connected edge controllers deployed at remote customer sites. You’ll build practical safeguards, lead detection and incident response, and translate compliance requirements into operating controls and audit evidence as the organization pursues security certifications.

Responsibilities - Secure the edge device fleet through hardened Linux configurations, safe provisioning and remote access, signed updates, and security telemetry. - Build and maintain cloud and edge infrastructure controls using infrastructure as code, including network segmentation, secrets handling, access controls, and audit logging. - Operate endpoint and cloud threat detection, triage alerts, and lead incident response with engineering colleagues. - Manage vulnerabilities across cloud services, software, and firmware, including penetration test planning and remediation. - Implement and document certification controls, maintain evidence, and lead audits and assessments. - Advise engineers on secure design, authentication, CI/CD safeguards, and feature reviews; support customer security reviews and internal standards.

Requirements - At least five years of professional experience in infrastructure, systems, security, or software, including two or more years in security operations or engineering. - Strong Linux experience across cloud and remote, embedded, or on-premises environments. - Hands-on AWS infrastructure as code and configuration management experience, such as Terraform or Ansible. - Production experience with incident response and vulnerability management. - Experience implementing and documenting controls for a framework such as ISO 27001, SOC 2, or NIST SP 800-171. - Scripting skills for automation; Python is preferred. - U.S. person status is required for work involving controlled unclassified information.

Nice to have - CMMC Level 2 or NIST SP 800-171 work, including security plans, remediation plans, scoring, or controlled-information enclaves. - Security experience in operational technology, industrial, or energy environments. - Familiarity with OAuth, SAML, OIDC, public key infrastructure, endpoint detection tools, or compliance platforms.

Benefits and work setup The listed package includes stock options, health coverage through a health reimbursement arrangement, a retirement savings plan, and unlimited paid time off. Visa sponsorship is not available.