FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in security program management, including SOC 2 readiness, incident response, and AWS infrastructure management. Proven ability to enhance reliability practices and embed security within the software development lifecycle.
Highest-signal resume keywords
AWS Infrastructure ManagementSOC 2 Program SupportSecurity Program ManagementReliability Improvement PracticesIncident Response Leadership
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Product SecurityPlatform SecuritySecurity EngineeringVulnerability ManagementInfrastructure-as-CodeDevOpsSRESLO DefinitionThreat ModelingAccess Control
Soft Skills
Strong CommunicationCollaborationAutonomous Initiative
Tools & Technologies
AWSTerraformCDKGitHubDatadogSlackNotionDrataWindows ServerGIS Servers
Industry Keywords
B2B ProductsRegulated IndustriesSecurity AuditsEndpoint SecurityData Handling Policies
Tech Stack
Tools & technologiesAWSCloudPostgresSDLCTerraform
About the role
Key responsibilities & impact- Own and grow CivilGrid’s security posture and support its cloud platform and reliability as the company scales
- Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions
- Run the security program, including SOC 2 readiness and audits, vendor reviews, access controls, endpoint security, and threat modeling
- Define and enforce policies for identity, secrets, data handling, and production access
- Lead incident response for security events and some reliability events from detection through resolution and follow-up
- Harden and monitor GIS servers running Windows Server alongside the AWS platform
- Build and maintain the Trust Center and lead security reviews with customers
- Contribute end to end to the AWS environment, including VPC architecture, ECS, RDS, secrets management, IAM, networking, and cost optimization
- Improve reliability practices, including SLOs, observability, alerting, on-call rotation, runbooks, and blameless post-incident reviews
- Work with AWS ECS, Postgres on RDS managed with CDK, GitHub, Datadog, Slack, Notion, and Drata
- Report to the Head of Engineering
Requirements
What you’ll need- At least 5-8 years of experience across product security, platform security, or security engineering, with hands-on experience with DevOps or SRE of production AWS infrastructure
- Experience running or supporting a SOC 2 program, including evidence collection, control design, and auditor coordination
- Deep working knowledge of AWS (VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch) and infrastructure-as-code (Terraform, CDK, or equivalent)
- Experience running vulnerability management, from scanner findings and outside reports to fixes shipped
- Track record of improving reliability in production: defining SLOs, building observability, running on-call, and leading post-incident reviews
- Autonomous, moves fast, and takes initiative without being asked
- Strong verbal and written communication, able to articulate ideas clearly and collaborate effectively
- Experience supporting B2B products sold into regulated industries is a bonus
- Willingness to work from the Boston office at least 3 days per week
- Legally authorized to work in the United States of America
Benefits
Comp & perks- Meaningful early-stage equity
- Company-funded medical, dental, and vision insurance — including medical plans at no cost to the employee
- FSA (health and dependent care)
- Unlimited PTO and a culture that expects you to actually use it
- 401(k) plan
- Flexible, remote-friendly work environment
- A high-trust team, real ownership, and the chance to do the most meaningful work of your career