Cybersecurity Operations Engineer

Job not on LinkedIn

🔥 0 minutes ago

⛰️ Colorado – Remote

⛰️ Colorado – Remote

💵 $93.8k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Granicus

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1999

🏛️ Government

☁️ SaaS

📋 Compliance

Government • SaaS • Compliance

Granicus is a company focused on transforming the way governments interact with their constituents through digital services and technology solutions. It provides the Government Experience Cloud to improve service delivery, community engagement, and operational efficiency across local, state, and federal governments. Granicus offers tools for agenda and meeting management, digital communication and engagement, public records management, and more, all designed to enhance customer experience and foster transparent and equitable interactions between governments and the people they serve.

📋 Description

• Operate, monitor, and continuously improve cybersecurity controls protecting a mission-critical SaaS product • Perform day-to-day security operations and security engineering for the designated SaaS product and supporting AWS environment • Execute security controls, continuous monitoring, control testing, audit evidence, corrective action, and authorization maintenance activities • Identify control gaps, configuration deviations, and emerging technical risk; resolve or escalate issues • Operate endpoint detection and response, centralized security logging and analytics, vulnerability scanning and management, and related cloud security capabilities • Maintain asset inventories, security telemetry, agents, sensors, log sources, dashboards, integrations, and operational reporting • Execute vulnerability scans, prioritize risk, coordinate remediation, track exceptions, and verify corrective actions • Monitor alerts and telemetry, triage events, manage cases, and investigate identity, endpoint, network, application, and cloud activity • Develop, test, and tune detections, correlation logic, and investigative queries • Perform or support incident response, including scoping, evidence preservation, containment, eradication, recovery, root-cause analysis, and corrective action tracking • Execute incident response playbooks, escalation paths, notification procedures, exercises, and post-incident reviews • Maintain investigation records, incident timelines, evidence, decisions, and required reports; participate in after-hours response when required • Improve runbooks, operating procedures, quality standards, service metrics, shift handoffs, and escalation practices • Execute operational activities for the enterprise data protection program, including discovery, classification, access, encryption, monitoring, retention, and secure disposal controls • Investigate suspected data leakage, misuse, or policy violations and maintain data protection workflows and metrics • Use AI-assisted analysis, scripting, APIs, query languages, and workflow orchestration to automate and improve security processes • Partner with Product, Engineering, Cloud, Compliance, Privacy, Legal, and business teams on architecture, releases, remediation, risk decisions, and customer assurance • Support additional cybersecurity projects and operational activities as assigned

🎯 Requirements

• Strong knowledge of security operations and security engineering for cloud-hosted SaaS products • Practical understanding of AWS environments and the cloud shared-responsibility model • Working knowledge of FedRAMP continuous monitoring, NIST SP 800-53 security controls, and the CJIS Security Policy • Hands-on ability to operate endpoint detection and response, centralized logging and security analytics, vulnerability management, and cloud security monitoring capabilities • Strong understanding of AWS identity, networking, compute, storage, logging, encryption, key management, and security-relevant configuration practices • Ability to maintain reliable security telemetry pipelines • Ability to write and modify investigative queries, detections, and correlation logic • Practical incident response skills • Knowledge of vulnerability management practices • Knowledge of enterprise data protection practices • Experience using scripting, APIs, query languages, and workflow automation • Ability to use AI-enabled capabilities responsibly • Ability to maintain operational metrics, runbooks, case records, evidence, and technical documentation • Strong analytical, troubleshooting, and decision-making skills • Ability to translate cybersecurity and compliance requirements into practical technical actions • Strong collaboration and communication skills • Ability to manage multiple priorities independently and recognize when escalation is required • 3+ years of experience in cybersecurity engineering, security operations, cloud security, incident response, or related roles • Demonstrated hands-on experience operating security monitoring, endpoint protection, vulnerability management, and incident response capabilities in an AWS-hosted production cloud or SaaS environment • Experience triaging and investigating security events and supporting incidents through containment, recovery, and lessons learned • Experience with cloud and application logs, security analytics, detection queries, case management, and vulnerability remediation workflows • Must be based in the United States • Must possess or be able to obtain and maintain the personnel screening and access authorization required for CJIS-regulated environments • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience • Experience supporting a FedRAMP-authorized, CJIS-regulated, or similarly controlled environment is strongly preferred • Experience supporting operational data protection activities and applying automation or AI-assisted capabilities is preferred • Relevant cybersecurity, cloud security, incident response, or security operations certifications are preferred

🏖️ Benefits

• Flexible Time Off • Company-Wide Wellbeing Days • Work From Home Reimbursement • Multiple Health Plan Options, including a 100% employer-paid plan • Employer HSA Contributions when enrolled in a High-Deductible Health Plan • Fitness Reimbursement Program • On-Demand Mental Health Support, including Headspace and other wellness tools • Paid Parental Leave for birthing and non-birthing parents • Traditional & Roth 401(k) with a generous company match • 100% employer-paid Life & AD&D Insurance • Online Learning Platforms • Competitive Salary & Bonuses