[Hiring] Systems & Security Engineer @AVATAR FLEET LLC

Role Description

The Systems & Security Engineer owns day-to-day security administration and infrastructure operations, working closely with the CTO and software engineering team. Approximately half of the role focuses on security administration, including:

• Vulnerability management
• Patching
• Mitigation
• SOC 2 Type II compliance

The remaining time focuses on systems administration, production reliability, and support for engineering delivery. These responsibilities overlap throughout the workday.

Our infrastructure runs on AWS and is EC2 heavy. Strong Linux administration and experience maintaining production applications on Linux hosts are essential. You will also support ECS and services such as WAF, ALB, S3, and EFS, and partner with software engineers on CI/CD. Application uptime directly affects our customers and is a core responsibility of this role.

The objective: keep AvatarFleet's SaaS infrastructure secure, reliable, and continuously audit ready. Maintain patched and hardened systems, effective monitoring, tested backups, documented controls, and dependable deployment processes so customers can rely on our applications and engineers can deliver changes with confidence.

Qualifications

• At least 5 years of hands-on Linux systems administration, with responsibility for security and availability in production environments; SaaS experience is preferred.
• Strong AWS administration skills, especially EC2 and Linux-hosted applications, with working experience across ECS, IAM, networking, load balancing, storage, WAF, and monitoring.
• Practical experience supporting SOC 2 Type II audits and maintaining controls throughout the audit period, including evidence collection, access reviews, and remediation tracking.
• Hands-on vulnerability management, Linux patching, security hardening, log analysis, and incident response.
• Experience with Terraform, Ansible, AWS CLI, shell scripting, Docker, and Docker Compose.
• Experience supporting CI/CD pipelines and troubleshooting deployment failures in collaboration with software engineers.
• Ability to troubleshoot across Linux, AWS, networking, containers, databases, storage, and application runtimes.
• Clear written communication, disciplined documentation, and sound prioritization based on risk, customer impact, and urgency.

Requirements

• Own day-to-day security administration and coordinate SOC 2 Type II control execution, evidence collection, and annual audit preparation with the CTO and other control owners.
• Maintain a year-round control calendar; track recurring reviews, evidence requirements, remediation commitments, and audit requests through completion.
• Maintain security policies and operating procedures that reflect actual practices; identify control gaps early and drive corrective action.
• Administer access controls and support access reviews, least privilege, credential management, and security logging. Keep records complete and readily available for audit.
• Run and review vulnerability assessments; prioritize findings by severity, exposure, business risk, and customer impact.
• Own routine and urgent patching of Linux hosts, application dependencies, container images, and supporting software in partnership with engineering.
• Plan maintenance, validate changes, and confirm remediation. Apply and document mitigations when an immediate patch is not practical.
• Track findings from discovery through verified resolution and maintain evidence of patching, mitigation, and approved exceptions.
• Deploy, configure, and maintain AWS resources, including EC2, ECS, WAF, ALB, S3, EFS, IAM, and networking components.
• Maintain secure configurations, appropriate capacity, reliable connectivity, and effective monitoring across production and supporting environments.
• Manage backups, replication, retention, restore testing, and secure data disposal in line with operational and compliance requirements.
• Improve performance and cost efficiency while protecting application availability.
• Administer Debian and Amazon Linux hosts, including services, packages, permissions, storage, networking, and system configuration.
• Maintain production applications on EC2 hosts and troubleshoot issues across the operating system, application runtime, containers, network, and storage.
• Support Docker, Docker Compose, and ECS workloads; keep configurations consistent and operating procedures documented.
• Maintain actionable infrastructure and security monitoring, log collection, and alerting; investigate alerts and respond to service interruptions.
• Restore service promptly, communicate impact and progress, and coordinate with engineering during production incidents.
• Investigate root causes, document incidents, and implement improvements that reduce recurrence.
• Maintain recovery procedures and operational runbooks; validate that backups and recovery processes work when needed.
• Support software engineering with CI/CD configuration, deployment environments, build and release troubleshooting, and secure pipeline access.
• Help maintain dependable deployments, configuration and secrets management, rollback procedures, and environment consistency.
• Partner with engineers to diagnose infrastructure and runtime issues affecting development, testing, and production.
• Use Terraform, Ansible, AWS CLI, and scripting to automate provisioning, configuration, patching, and recurring operational tasks.
• Keep infrastructure changes reviewable and reproducible; maintain useful system documentation, runbooks, and audit evidence.

Company Description

AvatarFleet helps transportation companies recruit, qualify, and stay compliant with the drivers who keep their fleets moving. Our platform, anchored by DriverHub, combines an applicant tracking system, DOT-compliant driver qualification files, and ongoing compliance monitoring into a single source of truth. We serve carriers across trucking, motorcoach, transit, and last-mile delivery who depend on us to keep their drivers road-ready and audit-ready.