[Hiring] Security Operations Engineer @Critical Loop

Role Description

Our battery systems and the software that runs them are deployed at customer sites such as industrial campuses, EV charging hubs, and utilities, with more underway. Each of these markets comes with its own security requirements, and we want to meet them with systems that are secure, maintainable, and simple to operate.

We're hiring a Security Operations Engineer to own security across our AWS platform, corporate IT, and a fleet of connected edge controllers at remote sites. You'll build the controls, run detection and response, and turn compliance requirements into working systems as we earn and maintain security certifications, including ISO 27001 and CMMC Level 2 as we pursue defense work. The team is small, so you'll make the calls on tooling and architecture and see them land in the field.

What You'll Do

• Own the security posture of our distributed edge fleet: hardened Linux baselines, secure provisioning and remote access, signed updates, and security telemetry.
• Build and maintain secure cloud and edge infrastructure as code (Terraform, Ansible), including network segmentation, secrets management, access control, and audit logging.
• Run detection and response: EDR and cloud threat detection, alert triage, and leading incident response with the engineering team.
• Run vulnerability management across cloud services, software, and device firmware, including pentest scoping and remediation.
• Own the technical controls and evidence behind our security certifications, and lead audits and assessments.
• Work with engineers on secure design: authentication between devices, services, and users; CI/CD security; and reviews of new features.
• Support customer security reviews, write standards, and help with IT security as needed.

Qualifications

• 5+ years of professional experience in infrastructure, systems, security, or software roles, including at least 2 years focused on security operations or security engineering.
• Strong Linux background across cloud and remote, embedded, or on-premise environments.
• Hands-on infrastructure as code and configuration management on AWS (Terraform, Ansible, or similar).
• Experience running incident response and vulnerability management in production.
• Experience implementing and documenting controls for a framework such as ISO 27001, SOC 2, or NIST SP 800-171.
• Scripting for automation; Python preferred.
• A practical approach: security that lets the team ship.
• Must be a U.S. person (U.S. citizen, lawful permanent resident, or protected individual), as required for work involving Controlled Unclassified Information.

Requirements

• CMMC Level 2 or NIST SP 800-171 experience: system security plans, POA&Ms, SPRS scoring, or CUI enclaves.
• Security experience with operational technology, industrial, or energy systems.
• Working knowledge of authentication and authorization protocols (OAuth, SAML, OIDC) and PKI.
• Experience with CrowdStrike or similar EDR, and Vanta or a similar compliance platform.

Benefits

• Equity ownership through stock options, giving you a stake in our success.
• Comprehensive health coverage (medical, dental, and vision) through an HRA with a generous allowance.
• Retirement savings plan.
• Unlimited paid time off to recharge and maintain work-life balance.

Company Description

Critical Loop is shaping the next generation of energy systems by building the integrated edge grid of the future. Specializing in advanced energy management and battery control systems, Critical Loop empowers businesses and communities to seamlessly unite distributed energy resources for faster, more reliable, and affordable grid access. With deep expertise in grid modernization and a passion for creating resilient, responsive energy solutions, Critical Loop drives innovation at the intersection of technology and energy.