Cybersecurity Operations Engineer

🕒 August 31

🇺🇸 United States – Remote

💵 $93.8k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 29%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 71 days.
• Jobs at this company usually fill in 41 days.
• Reposted 2 times.

Apply Now

Find Similar Remote Jobs

Granicus

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1999

🏛️ Government

☁️ SaaS

📋 Compliance

Government • SaaS • Compliance

Granicus is a company focused on transforming the way governments interact with their constituents through digital services and technology solutions. It provides the Government Experience Cloud to improve service delivery, community engagement, and operational efficiency across local, state, and federal governments. Granicus offers tools for agenda and meeting management, digital communication and engagement, public records management, and more, all designed to enhance customer experience and foster transparent and equitable interactions between governments and the people they serve.

📋 Description

• Operate, monitor, and continuously improve cybersecurity controls protecting a mission-critical SaaS product • Perform day-to-day security operations and security engineering for the SaaS product and supporting AWS environment • Execute security controls and operating procedures preserving product and data confidentiality, integrity, and availability • Apply FedRAMP, NIST SP 800-53, CJIS Security Policy, and Granicus security requirements • Complete continuous monitoring, control testing, audit evidence, corrective action, and authorization maintenance activities • Identify control gaps, configuration deviations, and emerging technical risk; resolve or escalate issues • Operate endpoint detection and response, centralized security logging and analytics, vulnerability scanning and management, and cloud security capabilities • Maintain security telemetry, log sources, dashboards, integrations, and operational reporting • Execute vulnerability scans, prioritize findings, coordinate remediation, track exceptions, and verify corrective actions • Monitor alerts and telemetry, triage events, manage cases, and investigate identity, endpoint, network, application, and cloud activity • Develop, test, and tune detections, correlation logic, and investigative queries • Perform or support incident response, including scoping, evidence preservation, containment, eradication, recovery, root-cause analysis, and corrective action tracking • Execute incident response playbooks, escalation paths, notification procedures, exercises, and post-incident reviews • Maintain auditable investigation records, incident timelines, evidence, decisions, and reports; participate in after-hours response when required • Improve runbooks, operating procedures, quality standards, service metrics, shift handoffs, and escalation practices • Execute operational activities for the enterprise data protection program • Support data discovery, classification, handling, access, encryption, monitoring, retention, and secure disposal controls • Investigate suspected data leakage, misuse, or policy violations • Use approved AI-assisted analysis, scripting, APIs, query languages, and workflow orchestration to automate and improve security processes • Partner with Product, Engineering, Cloud, Compliance, Privacy, Legal, and business teams on architecture, releases, remediation, risk decisions, and customer assurance • Communicate findings, incident status, priorities, tradeoffs, and program performance to technical and non-technical stakeholders • Support additional cybersecurity projects and operational activities

🎯 Requirements

• Role must be based in the United States • Must possess or be able to obtain and maintain personnel screening and access authorization required for CJIS-regulated environments • Strong knowledge of security operations and security engineering for cloud-hosted SaaS products • Practical understanding of AWS environments and the cloud shared-responsibility model • Working knowledge of FedRAMP continuous monitoring, NIST SP 800-53 security controls, and the CJIS Security Policy • Hands-on ability to operate endpoint detection and response, centralized logging and security analytics, vulnerability management, and cloud security monitoring capabilities • Strong understanding of AWS identity, networking, compute, storage, logging, encryption, key management, and security-relevant configuration practices • Ability to maintain reliable security telemetry pipelines • Ability to write and modify investigative queries, detections, and correlation logic • Practical incident response skills • Knowledge of vulnerability management practices • Knowledge of enterprise data protection practices • Experience using scripting, APIs, query languages, and workflow automation • Ability to use AI-enabled capabilities responsibly • Ability to maintain operational metrics, runbooks, case records, evidence, and technical documentation for regulated and audited environments • Strong analytical, troubleshooting, and decision-making skills • Ability to translate cybersecurity and compliance requirements into practical technical actions • Strong collaboration and written/verbal communication skills • Ability to manage multiple priorities independently and escalate when required • 3+ years of experience in cybersecurity engineering, security operations, cloud security, incident response, or related roles • Demonstrated hands-on experience operating security monitoring, endpoint protection, vulnerability management, and incident response capabilities in an AWS-hosted production cloud or SaaS environment • Experience triaging and investigating security events and supporting incidents through containment, recovery, and lessons learned • Experience with cloud and application logs, security analytics, detection queries, case management, and vulnerability remediation workflows • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience • Relevant cybersecurity, cloud security, incident response, or security operations certifications are preferred

🏖️ Benefits

• Flexible Time Off • Company-Wide Wellbeing Days • Work From Home Reimbursement • Multiple Health Plan Options, including a 100% employer-paid plan • Employer HSA Contributions when enrolled in a High-Deductible Health Plan • Fitness Reimbursement Program • On-Demand Mental Health Support, including Headspace and other wellness tools • Paid Parental Leave for birthing and non-birthing parents • Traditional & Roth 401(k) with a generous company match • Life & AD&D Insurance with 100% employer-paid coverage • Online Learning Platforms • Competitive Salary & Bonuses

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume