Security Operations Engineer

Job Summary

Owning the operational backbone of a mature security and compliance program, the full-time Security Operations Engineer will manage compliance audit cycles, automate processes, and respond to security inquiries while working remotely.

Key responsibilities

• Drive SOC 2, ISO 27001, PCI 4.0, and other compliance audit cycles, including evidence gathering and coordination with auditors
• Own the compliance automation platform, monitoring control status and updating the risk register as needed
• Run vendor and third-party risk reviews and partner with sales and legal on customer security inquiries

Required qualifications

• 3+ years of experience in security operations, GRC, IT security, or a related role
• 2+ years of experience with compliance audit cycles, including evidence gathering and documentation
• One or more security certifications such as CISA, Security+, or AWS Security Specialty
• Proficiency in Python and experience using AI-assisted development tools for automation
• Strong organizational skills to manage multi-week evidence collection cycles across stakeholders