SecOps Engineer

Midwest Tape•Holland, OH

5d•$130,000 - $165,000•Hybrid

About The Position

Midwest Tape is seeking a Security Operations Engineer with a cloud-first (AWS) and AI-aware security focus to advance our security operations program. This role is intentionally balanced across three core areas: ~50% AWS cloud security, ~25% securing AI and emerging intelligent systems, and ~25% general security operations. The role is primarily responsible for protecting AWS-hosted infrastructure and services. Maintaining effective security monitoring and incident response capabilities across environments. Helping automate processes and improving our security infrastructure. Also ensuring the secure use of AI and LLM technologies across the organization. This position is ideal for someone with years of security experience who wants to take on more ownership and contribute to shaping day-to-day operations and long-term security strategy. As part of our IT Product Development team, you will work closely with infrastructure, DevOps, database, and developer teams to ensure consistency and enhance our security posture. You will also collaborate with administrators and end users to provide technical support and identify new requirements. Communication, documentation and organization skills are key for this position, along with a problem-solving attitude.

Requirements

Strong knowledge of operating systems, including macOS, Linux, and Windows, as well as networking and AWS cloud environments.
Proficiency in scripting and automation for security operations using tools such as Python, PowerShell, and Bash.
Knowledge of common attack techniques and security frameworks, including MITRE ATT&CK, NIST, and CIS.
Familiarity with compliance and regulatory frameworks, with emphasis on NIST.
Proficiency with AI-powered development and productivity tools.
Strong decision-making skills and sound judgment in high-pressure security incidents.
Ability to produce clear, concise, and audience-appropriate technical documentation, including playbooks, runbooks, post-incident reports, escalation procedures, and security standards.
Effective written and verbal communication skills for technical and executive audiences.
Leadership, collaboration, and mentoring skills, with the ability to support team development and align security priorities with business objectives.
5+ years of progressive experience in security operations, incident response, or a closely related cybersecurity function.
Hands-on experience securing AWS environments, including monitoring, detection, investigation, access management, and cloud security controls.
Experience with infrastructure as code in a shared repository environment, including implementation and maintenance of Terraform-based solutions.
Demonstrated experience leading or supporting security incident response efforts, including investigation, containment, remediation, and post-incident analysis.
Experience working cross-functionally with infrastructure, DevOps, engineering, or related technical teams to implement security controls and improve operational maturity.

Nice To Haves

AWS Security, Advanced Networking or related certifications.

Responsibilities

Lead AWS security operations across a multi-account organization, including monitoring, detection, investigation, containment, and response.
Secure core AWS services including IAM, SCPs, EC2, EKS, S3, RDS, Lambda, CloudTrail, GuardDuty, Security Hub, Config, VPC, SGs, WAF, Shield, among other services.
Design and maintain least-privilege architectures, credential management, cross-account role access, and identity governance controls.
Implement new solutions and migrate existing solutions through Infrastructure as Code (IaC), specifically, Terraform.
Conduct cloud vulnerability and misconfiguration management, prioritizing remediation based on risk, exploitability, and business impact.
Automate cloud security operations when and where the use case best suits.
Develop documentation and maintain incident response playbooks, escalation procedures, and response automations.
Partner with DevOps and engineering teams to integrate security into CI/CD pipelines, software development, and infrastructure as code. (GitHub Advanced Security, GitHub Actions).
Monitor emerging threats, attack techniques, and best practices related to AI, GenAI, and LLM security.
Implement guardrails for data privacy, access control, logging, and monitoring in AI and LLM workflows.
Conduct security monitoring, detection, and incident response across cloud, on-prem, and hybrid environments.
Participate in an on-call rotation for security incident response.
Drive vulnerability management programs, prioritizing risks based on business impact.
Manage and tune SIEM (Security Information and Event Management), SOAR (Security Orchestration, Automation, and Response), and EDR (Endpoint Detection and Response) platforms, with emphasis on high-fidelity alerts and automation.
Perform threat hunting and root-cause analysis using cloud, endpoint, and application telemetry.
Collaborate with leadership to refine KPIs, incident response metrics, and security maturity goals.
Research and evaluate emerging security threats, tools, and technologies to enhance detection and response.
Play a supporting role across NIST functions and act as the technical backbone to turn policy and risk decisions into working security controls.
Perform all other functions as required, including any work assignments relating to the efficient flow of work within Midwest Tape.
Mentor junior and mid-level security engineers and promote operational excellence.
Contribute to the SecOps roadmap by identifying areas for operational improvement and future capability building.
Collaborate with InfoSec leadership to align security operations with overall risk management and compliance objectives.
Participate in the evaluation and selection of security tools, services, and vendors.
Define and track SecOps KPIs and SLAs to measure effectiveness and drive continuous improvement.
Provide input into budget planning for SecOps tools, training, and headcount needs.
Act as a subject matter expert in executive-level security discussions, audits, and compliance reviews.