Security Operations Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the security posture for the distributed edge fleet, which includes implementing hardened Linux baselines, secure provisioning, remote access, signed updates, and security telemetry.

• Develop and maintain secure cloud and edge infrastructure as code, focusing on network segmentation, secrets management, access control, and audit logging.

• Oversee detection and response efforts, encompassing EDR and cloud threat detection, alert triage, and leading incident responses alongside the engineering team.

• Manage vulnerability assessments across cloud services, software, and device firmware, including scoping and remediation of pentests.

• Take ownership of technical controls and documentation required for security certifications, while leading audits and assessments.

• Collaborate with engineers on secure design practices, device/service/user authentication, CI/CD security, and evaluations of new features.

• Assist with customer security reviews, develop standards, and provide support for IT security as necessary.

⛳️ Requirements

• At least 5 years of professional experience in infrastructure, systems, security, or software roles, with a minimum of 2 years concentrating on security operations or security engineering.

• Strong background in Linux across cloud, remote, embedded, or on-premises environments.

• Proficient in infrastructure as code and configuration management on AWS, using tools like Terraform, Ansible, or similar.

• Experience in incident response and vulnerability management within production environments.

• Familiarity with implementing and documenting controls for frameworks such as ISO 27001, SOC 2, or NIST SP 800-171.

• Competence in scripting for automation, with a preference for Python.

• Must qualify as a U.S. person (U.S. citizen, lawful permanent resident, or protected individual) due to the nature of work involving Controlled Unclassified Information.

• Experience with CMMC Level 2 or NIST SP 800-171, including system security plans, POA&Ms, SPRS scoring, or CUI enclaves.

• Security expertise in operational technology, industrial, or energy systems.

• Working knowledge of authentication and authorization protocols (OAuth, SAML, OIDC) and PKI.

• Experience with CrowdStrike or similar EDR, and Vanta or a comparable compliance platform.

• Critical Loop does not offer visa sponsorship; applicants must not require immigration assistance now or in the future.

🏝️ Benefits

• Equity ownership through stock options.

• Comprehensive medical, dental, and vision coverage through an HRA with a generous allowance.

• Retirement savings plan.

• Unlimited paid time off.