[Hiring] Security Engineer @iSeatz

Role Description

The Security Engineer reports to the Information Security Manager and works closely with Security, DevOps, Engineering, IT, and Compliance teams to design, build, operate, and continuously improve the technical controls that protect iSeatz systems, applications, and data. This is a hands-on engineering role focused on secure AWS environments, automation, detection and response capabilities, and practical risk reduction across a cloud-native platform.

In this role, you will:

• Engineer and maintain security controls across AWS accounts and services, including identity, logging, monitoring, network security, encryption, and configuration assurance.
• Develop, review, and improve Infrastructure as Code for security controls and cloud infrastructure.
• Operate and improve the SIEM, including log source onboarding, detection content, alert tuning, investigation support, dashboards, and use cases aligned to real threats and business risk.
• Administer and strengthen identity and access management controls across the identity provider, cloud environments, and critical SaaS platforms.
• Maintain and enhance intrusion detection and prevention capabilities across cloud, endpoint, and network environments.
• Own key portions of the vulnerability management lifecycle.
• Partner with Engineering and DevOps to secure CI/CD pipelines, application dependencies, secrets, container images, Kubernetes or ECS workloads, and runtime environments.
• Build security automation, integrations, and tooling using scripting and APIs.
• Support security incident response by conducting technical investigation, collecting evidence, coordinating remediation, and improving controls after incidents and exercises.
• Perform technical security reviews of infrastructure, architecture, applications, and configuration changes.
• Stay current on cloud threats, attack techniques, and defensive capabilities.

Qualifications

• 3+ years of hands-on experience in security engineering, cloud engineering, systems engineering, DevSecOps, or a closely related technical role.
• Hands-on experience securing AWS environments.
• Professional experience using Infrastructure as Code to build or manage cloud infrastructure and security controls.
• Hands-on experience with a SIEM or cloud security analytics platform.
• Hands-on experience with an identity provider and identity security controls.
• Experience operating or supporting IDS, IPS, EDR, NDR, WAF, or comparable detection and prevention technologies.
• Experience with vulnerability management tools and processes.
• Working knowledge of containerization and cloud-native workload security.
• Ability to automate tasks and integrate tools using various programming languages and APIs.
• Strong analytical, troubleshooting, and communication skills.
• Ability to work independently while collaborating effectively across teams.

Requirements

• Hands-on AWS CDK experience.
• Deep penetration testing experience across various environments.
• Experience securing Kubernetes or EKS at scale.
• Experience with security automation, SOAR, case management, or custom integrations.
• Experience in a PCI DSS, SOC 2, or other regulated environment.
• Experience with application security tools and practices.
• Relevant security or cloud certifications.

Benefits

• Competitive compensation.
• Comprehensive suite of benefits including robust health insurance.
• 401(k) plan with company matching.
• Generous paid time off.
• Up to eight weeks of paid parental leave for eligible caregivers.
• Remote-first company with flexibility and autonomy.
• Annual professional development allowance.