Onit

Onit

Onit provides automated legal operations and workflow software designed to enhance productivity and strategic decision-making across various industries by utilizing an AI-native framework for managing enterprise legal workflows, contracts, vendors, and...

IT Services
501-1000
Founded 2011
$216M raised

Description

  • Develop cybersecurity engineering and operations strategy, technical roadmaps, architecture standards, and measurable security outcomes with the VP of Compliance and Security.
  • Design and continuously improve security controls across AWS and corporate environments, including identity, network, workload, container/Kubernetes, and data protections.
  • Deliver security automation as code using Terraform, Python, CI/CD pipelines, and policy-as-code.
  • Lead security operations and incident response, including detection, investigation, containment, recovery, and executive, legal, and regulatory escalation.
  • Own vulnerability and exposure management across applications, cloud, endpoints, and external attack surfaces, including risk-based remediation SLAs.
  • Lead security for Microsoft 365, Entra ID, endpoints, email, and privileged access management.
  • Drive application and product security practices across the SDLC, including SAST, DAST, SCA, SBOMs, API security, threat modeling, and AI-enabled applications.
  • Lead, mentor, and scale the cybersecurity team; manage security vendors, penetration tests, and managed security services.
  • Serve as a senior security advisor to Engineering, IT, Product, and executive leadership.

Requirements

  • 10+ years of progressive cybersecurity experience, including 5+ years in security leadership or management and experience managing managers and technical teams.
  • Deep experience securing cloud-native enterprise SaaS applications, with hands-on AWS security expertise across IAM, VPC, EC2, RDS, S3, EKS/ECS, logging, and monitoring.
  • Strong knowledge of Linux, networking, containers, and Kubernetes.
  • Experience with SIEM, EDR, CSPM, vulnerability management, WAF, security monitoring, and incident detection and response programs.
  • Experience securing Microsoft 365 and Entra ID, including MFA, Conditional Access, identity protection, privileged identity management, access governance, and Just-In-Time access.
  • Strong application and API security knowledge, including SAST, DAST, SCA, SBOMs, secrets management, and authentication and authorization.
  • Experience automating security with Python, Bash, Terraform, APIs, CI/CD platforms, Infrastructure-as-Code security, and policy-as-code guardrails.
  • Proficiency using AI tools and LLM assistants for security workflows and evaluating their outputs; experience securing AI-enabled applications and LLM integrations is preferred.
  • Ability to communicate cybersecurity risks to technical and non-technical stakeholders while balancing risk, business goals, and engineering velocity.
  • Preferred experience with multi-tenant SaaS security, CrowdStrike, Cloudflare, DevSecOps, offensive security, SOC 2, ISO 27001, NIST, FedRAMP, or certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC.

Benefits

  • Competitive base pay based on skills, education, experience, and location, plus annual discretionary bonus eligibility.
  • Three medical plan options, dental and vision coverage, and employer HSA contributions for HDHP participants.
  • 401(k) with a 100% match on the first 3% and 50% match on the next 2% of employee contributions.
  • Flexible paid time off, 7 sick days, and 9 paid company holidays annually.
  • Paid leave for birth parents, non-birth parents, and caregivers, plus surrogacy and adoption reimbursement.
  • 100% employer-paid life and disability insurance.
  • Voluntary coverage options, including hospital indemnity, critical illness, accident, and pet insurance.
  • Healthcare, HSA, and dependent care FSA options, plus one paid volunteer day annually.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Forward - Security Engineer, Network & Infrastructure Security

ShyftLabs 51-200 IT Services

ShyftLabs is seeking a client-facing Security Engineer, Network & Infrastructure Security to strengthen enterprise network, infrastructure, and cloud security controls for a Fortune 500 client.

Ansible AWS Azure Bash CI/CD Cisco Cloudflare CrowdStrike DHCP DNS Fortinet GCP Network Security PowerShell Python TCP/IP Terraform
5 hours, 37 minutes ago

Sr. Security Engineer

Istari 11-50 Aerospace & Defense

Istari Digital is seeking a Senior Security Engineer to lead and enhance security tooling, compliance automation, application security, and security operations for regulated engineering software environments, including Government-hosted systems.

Argo CD AWS Bash CI/CD Cybersecurity DevSecOps Docker GitHub Kubernetes LLM Penetration Testing Python
5 hours, 37 minutes ago

IT Operations & Security Lead - UK (Remote)

Zen Educate 201-500 Diversified Consumer Services

Zen Educate is seeking a remote IT Operations & Security Lead to build and scale secure, automated corporate IT systems and security practices for its growing UK and US workforce.

Cybersecurity Encryption
5 hours, 52 minutes ago

Binance Accelerator Program – AI Infra Security Engineer

Binance 5001+ Capital Markets

Join Binance’s Infrastructure team as an AI Security Accelerator intern to strengthen the security of its multi-cloud production environment through AI-driven detection, penetration testing, and LLM-agent security.

AWS Azure CI/CD Deep Learning GCP Linux LLM Machine Learning Network Security Penetration Testing Secrets Management WAF
1 day, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers