Security Operations Engineer
Core
Own the operational backbone of a mature security and compliance program (SOC 2, ISO 27001, PCI 4.0) for a Voice AI company, including audit cycles, vulnerability triage, and incident response.
Role type
Senior Security Operations Engineer (GRC focus)
Builds
Compliance automation platform (Vanta), security tooling, and operational playbooks
Domain
AI/ML infrastructure security, Cloud Security, GRC
Deliverable
production ML models | dashboards & analysis | client delivery
Required skills
Security operations, GRC, compliance audit cycles, vulnerability triage, incident response, Python scripting, AI-assisted development tools
Preferred skills
Application security fundamentals, SAST/SCA/DAST, IaC security, Cloud infrastructure (AWS), SIEM, Endpoint security, AI/ML system security
Technologies
Vanta, Python, AWS, Terraform, SIEM, SAST, SCA, DAST
Responsibilities
Drive SOC 2, ISO 27001, PCI 4.0 compliance audit cycles; Own the compliance automation platform (Vanta); Run vendor and third-party risk reviews; Partner with sales and legal on security questionnaires; Drive vulnerability triage and prioritization; Monitor and respond to security alerts; Support incident response; Build automation to reduce manual burden
Seniority
Senior, hands-on IC
