IT Security Engineer

Worth AI•Miami, FL

14h•Hybrid

About The Position

Worth AI is seeking a hands-on Security Engineer to strengthen its vulnerability management program, harden its AWS environment, and integrate application security into software delivery. This project-driven role owns initiatives from scoping remediation efforts through implementing controls, while also managing day-to-day security tickets within defined SLAs. The position works closely with engineering, IT, and compliance, requiring clear communication and reliable follow-through alongside technical expertise. The role covers vulnerability management, identity management, AWS cloud security, application security, security operations, and cross-functional security projects. The job description notes that the position is remote and also states that Orlando associates work hybrid, with three in-office days per week.

Requirements

2–4 years of experience in a security engineering, security analyst, or related role.
Hands-on experience with AWS security services and concepts, including IAM, VPC, GuardDuty, Security Hub, and CloudTrail.
Practical experience with vulnerability management tools and remediation workflows.
Working knowledge of application security concepts, including OWASP Top 10, SAST/DAST, and dependency scanning.
Experience managing a ticket queue against SLAs, with strong ownership and follow-through.
Strong written and verbal communication skills and comfort working cross-functionally.
Solid analytical and troubleshooting skills, with the ability to prioritize competing deadlines.
Comfortable working in-office three days per week.
Able to work independently as a self-starter while collaborating across teams.
Willing to participate in on-call or escalation coverage as needed.

Nice To Haves

AWS certification, such as Security Specialty or equivalent.
Experience with tools such as Wiz, Tenable, Qualys, or Snyk.
Scripting experience in Python or bash for automation and tooling.
Exposure to compliance frameworks such as SOC 2.
Experience with Jira, Linear, or similar ticketing and project tools.

Responsibilities

Own the vulnerability scanning program across endpoints, servers, and cloud infrastructure.
Triage, prioritize, and track vulnerability findings through remediation in partnership with engineering and IT owners.
Monitor and report on remediation SLAs, and escalate aging or high-severity findings.
Maintain vulnerability management documentation, metrics, and recurring reports.
Improve identity management configurations and automations to strengthen security and user experience.
Monitor and harden AWS environments, including IAM, security groups, S3, CloudTrail, GuardDuty, Security Hub, and Config.
Implement and maintain security guardrails and baseline configurations across AWS accounts.
Investigate and respond to cloud security alerts and incidents.
Support least-privilege access reviews and cloud configuration audits.
Support SAST, DAST, and dependency/SCA scanning in the CI/CD pipeline.
Review and triage application security findings with engineering teams and track remediation to closure.
Participate in secure code reviews and threat modeling for new features and services.
Help maintain secure development guidelines and application security tooling.
Triage and resolve security tickets and requests within defined SLAs.
Own incidents and requests through resolution, escalating when needed.
Document decisions, incidents, and remediation status clearly and accurately.
Lead or contribute to security initiatives, including tooling rollouts, control implementations, and audit and compliance preparation.
Collaborate with engineering, IT, and compliance to embed security into everyday workflows.
Communicate risk, status, and trade-offs clearly to technical and non-technical stakeholders.