Security Engineer

What You’ll Do

The Security Engineer reports to the Information Security Manager and works closely with Security, DevOps, Engineering, IT, and Compliance teams to design, build, operate, and continuously improve the technical controls that protect iSeatz systems, applications, and data. This is a hands-on engineering role focused on secure AWS environments, automation, detection and response capabilities, and practical risk reduction across a cloud-native platform.

In this role, you will translate security requirements into durable technical solutions, help engineering teams ship securely, and improve the visibility and resilience of the services our customers depend on.

Your Impact

• Engineer and maintain security controls across AWS accounts and services, including identity, logging, monitoring, network security, encryption, and configuration assurance.
• Develop, review, and improve Infrastructure as Code for security controls and cloud infrastructure. Work within existing IaC workflows and help make secure patterns repeatable for engineering teams.
• Operate and improve the SIEM, including log source onboarding, detection content, alert tuning, investigation support, dashboards, and use cases aligned to real threats and business risk.
• Administer and strengthen identity and access management controls across the identity provider, cloud environments, and critical SaaS platforms, including SSO, MFA, lifecycle automation, privileged access, and access reviews.
• Maintain and enhance intrusion detection and prevention capabilities across cloud, endpoint, and network environments. Investigate meaningful detections and partner on containment and remediation.
• Own key portions of the vulnerability management lifecycle: asset coverage, scanning, validation, prioritization, remediation tracking, exception support, and executive or technical reporting.
• Partner with Engineering and DevOps to secure CI/CD pipelines, application dependencies, secrets, container images, Kubernetes or ECS workloads, and runtime environments.
• Build security automation, integrations, and tooling using scripting and APIs to reduce manual effort, improve evidence quality, and increase response speed.
• Support security incident response by conducting technical investigation, collecting evidence, coordinating remediation, and improving controls after incidents and exercises.
• Perform technical security reviews of infrastructure, architecture, applications, and configuration changes. Document findings, recommendations, standards, and operational runbooks clearly.
• Stay current on cloud threats, attack techniques, and defensive capabilities, then apply that knowledge in ways that improve iSeatz security without creating unnecessary friction.

What You Bring to the Table

• 3+ years of hands-on experience in security engineering, cloud engineering, systems engineering, DevSecOps, or a closely related technical role.
• Hands-on experience securing AWS environments, with a working understanding of core AWS security services and multi-account or multi-environment operations.
• Professional experience using Infrastructure as Code to build or manage cloud infrastructure and security controls. 
• Hands-on experience with a SIEM or cloud security analytics platform, including log analysis, detection engineering or alert tuning, investigation workflows, and reporting.
• Hands-on experience with an identity provider and identity security controls, such as SSO, MFA, SCIM or lifecycle management, access governance, and privileged access.
• Experience operating or supporting IDS, IPS, EDR, NDR, WAF, or comparable detection and prevention technologies, with a strong grasp of network security fundamentals.
• Experience with vulnerability management tools and processes, including scanning, asset inventory, prioritization, remediation tracking, validation, and risk-based communication.
• Working knowledge of containerization and cloud-native workload security, including Docker, container registries, image scanning, and orchestrated workloads such as Kubernetes, ECS, or EKS.
• Ability to automate tasks and integrate tools using Python, Bash, PowerShell, JavaScript or TypeScript, APIs, and version-controlled workflows.
• Strong analytical, troubleshooting, and communication skills. You can work across technical and nontechnical teams, explain risk plainly, and move work from finding to resolution.
• Ability to work independently while collaborating effectively across Security, Engineering, DevOps, IT, and Compliance.

Bonus Points

• Hands-on AWS CDK experience, especially building reusable security guardrails and secure-by-default patterns in TypeScript or Python.
• Deep penetration testing experience across web applications, APIs, cloud environments, internal networks, or adversary simulation, including the ability to validate remediation and explain practical exploit paths.
• Experience securing Kubernetes or EKS at scale, including admission controls, workload identity, network policies, secrets management, runtime detection, and image supply chain security.
• Experience with security automation, SOAR, case management, or custom integrations that enrich, prioritize, or respond to alerts.
• Experience in a PCI DSS, SOC 2, or other regulated environment, including translating control requirements into technical evidence and sustainable engineering practices.
• Experience with application security tools and practices, including SAST, DAST, SCA, secrets scanning, threat modeling, or secure code review.
• Relevant security or cloud certifications such as AWS Certified Security Specialty, CISSP, CCSP, GIAC.