Security Engineer

• Own day-to-day security operations
• Support the company's compliance programs
• Serve as the company's security point of contact in a sole-coverage role
• Work hand-in-hand with the small DevOps team, with DevOps support for execution
• Perform hands-on cloud security engineering across AWS-first infrastructure
• Triage security alerts and respond to cloud incidents
• Implement Terraform changes through pull requests
• Apply Kubernetes security practices, including RBAC and workload hardening
• Manage vulnerability scanning, prioritization, and remediation coordination
• Support SOC 2 audits by providing control evidence and working with auditors
• Address CI/CD and software supply-chain security

Senior Cloud Security Engineer

• Conduct in-depth investigations of security incidents, including data breaches, malware infections, and unauthorized access attempts
• Identify the root cause of security incidents and determine the scope of impact
• Use central alerting and graphing systems to monitor internal infrastructure and customer events
• Collaborate with security teams to address threats, enhance defenses, and prevent future incidents
• Oversee identification and resolution of vulnerabilities arising from security-related incidents
• Provide training and guidance to team members on security incidents, potential gaps, and associated risks
• Stay current with emerging threat hunts and digital forensics tools and methodologies

Senior Security Incident Responder

• Conduct in-depth investigations of security incidents, including data breaches, malware infections, and unauthorized access attempts
• Identify the root cause of security incidents and determine the scope of impact
• Monitor internal infrastructure and customer events using central alerting and graphing systems
• Collaborate with security teams to address threats, enhance defenses, and prevent future incidents
• Improve overall security posture
• Oversee identification and resolution of vulnerabilities arising from security-related incidents
• Provide training and guidance to team members regarding security incidents, potential gaps, and associated risks
• Stay current with emerging threat hunts and digital forensics tools and methodologies