Own end-to-end security operations: monitoring, investigation, and response across AWS, SaaS, and endpoint environments.
Lead incident response from triage to root cause and executive reporting.
Design and refine operational playbooks.
Secure AWS using Wiz and native controls, proactively addressing misconfigurations and identity risks.
Continuously assess cloud posture and drive remediation with Cloud Engineering, embedding secure-by-design principles.
Own the vulnerability management lifecycle (Tenable), translating data into business risk decisions and driving architectural improvements.
Manage and optimize endpoint detection and response (CrowdStrike).
Oversee identity and access control validation, including quarterly reviews and least-privilege enforcement.
Lead phishing simulations and security awareness.
Build automation and response workflows with Torq to accelerate remediation.
Continuously evaluate and optimize the security stack; identify bottlenecks and engineer scalable solutions.
Maintain and mature compliance (ISO 27001, SOC 2, PCI-DSS) using Drata for continuous monitoring and audit readiness.
Conduct control testing (CIS Benchmarks, MITRE ATT&CK).
Support risk assessments and security evaluations.
Act as a security advisor to IT, Engineering, and business leadership, providing risk-informed guidance and helping shape the security program roadmap.

Requirements

5+ years of progressive experience in Information Security, Cloud Security, or Security Operations.
Strong hands-on experience with modern security tooling, including Splunk, Wiz, Tenable, CrowdStrike, Torq, and Drata.
Proven experience securing AWS and SaaS-based environments.
Experience operating within regulated environments (ISO 27001, SOC 2, PCI-DSS).
Familiarity with CIS Benchmarks, MITRE ATT&CK, and modern security architecture principles.
Ability to independently prioritize, execute, and drive outcomes across multiple domains.
Clear communication skills with the ability to translate technical risk to business stakeholders.
High integrity, strong ownership mindset, and a bias toward action.

Benefits

Medical, dental, vision, and disability insurance
Flexible Time Off (FTO), 12 company holidays, sick leave and 8-Weeks Paid Parental Leave
Unique professional development benefits with Annual “development dollars” to support our people growth and development
Wellness contests and monthly educational programs
401(K) retirement program

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security operationsincident responsevulnerability managementcloud securityendpoint detection and responseautomation workflowscontrol testingrisk assessmentssecurity evaluationssecurity architecture

Soft Skills

clear communicationownership mindsetprioritizationexecutiondriving outcomesrisk-informed guidanceleadershipcollaborationproblem-solvingadaptability

Certifications

ISO 27001SOC 2PCI-DSS