Security Operations Engineer

📋 Description

• Drive SOC 2, ISO 27001, PCI 4.0, and other compliance audit cycles: gather and organize evidence
• Own the compliance automation platform (Vanta): monitor control status, chase down failing checks
• Run vendor and third-party risk reviews, security assessments of new tools, periodic re-reviews
• Partner with sales and legal responding to customer and vendor security questionnaires, RFP
• Drive vulnerability triage and prioritization across teams, tracking remediation against SLAs and
• Monitor and respond to alerts from endpoint, cloud, identity, and application security tools

🎯 Requirements

• 3+ years of experience in security operations, GRC, IT security, or a related role
• 2+ years of experience with compliance audit cycles—you've gathered evidence, documented controls
• One or more security certifications—CISA, Security+, AWS Security Specialty, or equivalent
• Experience executing recurring security operations work: security reviews, vulnerability tracking
• Strong organization—you can run a multi-week evidence collection cycle across many stakeholders
• Strong written communication skills—you'll write audit documentation, security questionnaire

🎁 Benefits

• Competitive equity grants
• 100% employer-paid benefits
• Fully remote work
• 401k match up to 4% for full-time US-based team members