Senior Security Operations Engineer

Job Summary

To enhance security measures and compliance, the full-time Senior Security Operations Engineer will engage in hands-on engineering tasks such as threat modeling and secure code reviews, while also managing operational responsibilities including compliance audits and vulnerability management in a remote environment.

Key responsibilities

• Conduct threat modeling and security design reviews, collaborating with product and platform engineers
• Drive vulnerability triage and remediation efforts across teams, tracking metrics and reporting progress
• Support compliance audit cycles for SOC 2, ISO 27001, and PCI 4.0 by gathering evidence and documenting controls

Required qualifications

• 5+ years of experience in security engineering, security operations, or a related role
• Hands-on experience with SOC 2, ISO 27001, or PCI compliance audit cycles
• Strong application security fundamentals, including threat modeling and secure code review
• Experience with security tooling across the development lifecycle such as SAST and DAST
• Working knowledge of AWS infrastructure and services, including IAM and VPC networking