Security Automation Engineer

📋 Description

• Own the majority of Stackline's ~50 SOC 2 Type II controls in Vanta; route the rest to owners in
• Drive vulnerability remediation to SLA — critical in 15 days, high in 30, medium in 90 — across
• Run quarterly access reviews, the annual risk assessment, policy and vendor reassessment, and the
• Coordinate the annual penetration test and track findings to closure.
• Own incident response for identity and endpoint compromise: investigate, contain, document.
• Extend the nightly evidence-collection pipeline into a maintainable, company-owned system.

🎯 Requirements

• You write real code: production-quality Python or PowerShell, and ability to read the other.
• Deep, hands-on identity experience: Entra ID or Azure AD at depth (conditional access
• Endpoint management at fleet scale: Intune or Jamf — configuration profiles, compliance policy
• You've carried a compliance framework, not just survived one: SOC 2, ISO 27001, or similar, from
• You've built automation other people depended on: scheduled jobs, API integrations, least-privilege
• You're comfortable being the whole function: no tier one beneath you, no second administrator

🎁 Benefits

• Comprehensive medical, dental, and vision coverage including HSA with company match and FSA options
• Fertility benefits to support your path to parenthood
• 401(k) with company match
• Company-paid life insurance
• 20 days of PTO + 9 company holidays
• Paid parental leave for all parents