Security Operations Engineer

1 month, 1 week ago
Full-time
Mid Level
DevOps and Infrastructure
AssemblyAI

AssemblyAI

AssemblyAI is a leading provider of AI models for transcribing and understanding speech. Their Speech AI models offer accurate speech-to-text conversion, speaker detection, sentiment analysis, and more, enabling users to extract valuable insights from ...

Media
51-250
Founded 2017
$63M raised

Description

  • Drive SOC 2, ISO 27001, PCI 4.0, and other compliance audits from evidence collection through auditor fieldwork and remediation.
  • Own the Vanta compliance automation platform, including control monitoring, failing checks, integrations, and risk register updates.
  • Conduct vendor and third-party risk reviews, security assessments, re-reviews, and inventory management.
  • Respond to customer and vendor security questionnaires, RFP security sections, and trust-and-safety inquiries with sales and legal.
  • Coordinate vulnerability triage, prioritization, SLA-based remediation tracking, and stakeholder reporting.
  • Monitor and investigate endpoint, cloud, identity, and application security alerts, escalating and closing incidents.
  • Support incident response through evidence collection, timeline development, documentation, and post-incident action tracking.
  • Maintain security runbooks, process documentation, and operational playbooks.
  • Build scripts, integrations, reports, and other automation to reduce manual security operations work.

Requirements

  • 3+ years of experience in security operations, GRC, IT security, or a related field.
  • 2+ years of experience managing compliance audit cycles and working with auditors.
  • CISA, Security+, AWS Security Specialty, or an equivalent security certification.
  • Experience with recurring security operations such as security reviews, vulnerability tracking, alert triage, or control monitoring.
  • Strong organizational skills for managing multi-week evidence collection across multiple stakeholders.
  • Strong written communication skills for audit documentation, questionnaires, policies, and runbooks.
  • Proficiency in Python and ability to read code written by others.
  • Experience using AI-assisted development tools such as Claude Code or Copilot for scripts, automation, and documentation.
  • Knowledge of application security, including threat modeling, secure code review, OWASP Top 10, or CWE (preferred).
  • Familiarity with security tooling, Terraform, AWS/IAM, SIEM, endpoint security, cloud security posture management, AI/ML security, or startup security environments (preferred).

Benefits

  • $180,000–$220,000 USD base salary.
  • Competitive equity grants.
  • 100% employer-paid benefits.
  • Fully remote work flexibility.
  • 401(k) match of up to 4% for U.S.-based full-time employees.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cybersecurity Engineer

Nooks 1-10 Professional Services

Nooks is seeking a hands-on Cybersecurity Engineer to own and strengthen the company’s unclassified environment, maintaining NIST SP 800-171 and CMMC Level 2 compliance and audit readiness across its facilities.

Cybersecurity
4 hours, 33 minutes ago

Senior Microsoft Engineer (Level 3) | Azure | M365 | Security

Dijital Team 11-50 Internet Software & Services

A Senior Microsoft Engineer (Level 3) will serve as a technical authority for a managed IT services provider, resolving complex issues and improving the security, reliability, and efficiency of multi-tenant Microsoft cloud environments for commercial customers.

Azure Cybersecurity PowerShell
4 hours, 48 minutes ago

HQ - Lead Information Security Engineer

Jobandtalent 1K-5K Professional Services

Job&Talent is seeking a Lead Information Security Engineer to lead a team of four and strengthen incident response, threat detection, cloud security, and security operations for its global AI-powered workforce platform.

AWS Azure CI/CD SIEM
4 hours, 48 minutes ago

Platform Security Engineer

ITHAKA 251-1K Diversified Consumer Services

ITHAKA is seeking a Platform Security Engineer to mature its DevOps practices into DevSecOps by integrating security automation, tooling, and secure-by-default workflows across software delivery and infrastructure.

AWS CI/CD DevSecOps
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers