Security Operations Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Future U Podcast

WebsiteLinkedInAll Job Openings

1 - 10 employees

📚 Education

📱 Media

Education • Media

Future U Podcast is a podcast hosted by Jeff Selingo and Michael Horn, focusing on the future of higher education. The podcast explores what’s next for higher education through insightful discussions with thought leaders and newsmakers in the field. Future U covers a wide range of topics critical to colleges and universities, such as technology integration, university innovation and leadership, student readiness, and dealing with enrollment challenges. Jeff Selingo is a New York Times bestselling author and higher education strategist, while Michael Horn is an expert on disruptive innovation and education transformation. New episodes are released every other Tuesday, providing commentary on pertinent issues facing higher education today.

📋 Description

• Own the day-to-day operation of our centralized logging/SIEM — investigate alerts, create and tune detections, improve signal quality, and build the runbooks to act on them. • Drive vulnerability management end to end — scanning, triage, and remediation to closure across our stack. • Harden our cloud environment and CI/CD pipelines, establish security configuration baselines and guardrails, and manage them through Infrastructure as Code. • Partner with engineering teams to review new systems and architectural changes, identifying security risks early and helping build secure solutions by default. • Own secrets management, endpoint/EDR, and data-protection controls. • Own the security-critical IT surface — partnering with our existing IT function, not depending on it day-to-day. • Manage endpoint hardening. • Harden our core SaaS/business apps — identity provider, Google Workspace, GitHub, and the rest. • Own and continuously improve our security compliance platform (Vanta) — automate evidence collection, strengthen integrations, and improve its operational value. • Build toward compliance obligations as the business requires; turn policy into enforced reality by implementing the technical controls behind it, co-maintained with GRC + Legal.

🎯 Requirements

• 3+ years of hands-on work with security technical controls, ideally alongside strength in IT operations and/or security compliance. • Experience operating technical controls across their full lifecycle(built, tuned, maintained, retired), not just stood up once. • Hands-on experience running a SIEM as a living system — investigating alerts, tuning detections, reducing noise, and closing visibility gaps over time. • Experience with real audits (SOC 2, ISO 27001, FedRAMP, or equivalent) and the judgment to tell a control that produces evidence from one that just looks good. • Practical IAM and SaaS/cloud administration experience (identity security, least privilege, access reviews). • Scripting and automation ability (Python, Bash, or similar) — and a track record of maintaining what you build. • A calm, process-driven, and people first approach when something's on fire; and a habit of writing things down so they outlive you. • Familiarity with a compiled language (Go, Rust) for heavier automation. • Relevant certifications (e.g., CISSP, Security+, cloud security certs) — useful signal, never a substitute for hands-on ability. • Hands-on AWS security and Infrastructure as Code experience, especially Terraform. • Experience as an early or first security hire at a startup.

🏖️ Benefits

• remote work options