Security Engineer

Ovative Group • Minneapolis, MN

3d • Hybrid

About The Position

Ovative Group is seeking a Security Engineer to join its Information Security team. Reporting to the Lead Security & Cloud Engineer, this role is responsible for day-to-day security operations, threat and vulnerability management, and security tooling, with hands-on work securing the company’s adoption of AI. The position works across cloud-native and enterprise productivity environments, including GCP, Azure, M365, and AWS.

The Security Engineer monitors and investigates security events, supports incident response and business continuity exercises, manages vulnerabilities, coordinates remediation, and works with engineering and IT teams on patching and hardening. The role also helps secure AI infrastructure, applications, vendors, tools, agents, and integrations through secure configuration, guardrails, monitoring, and team guidance.

The position administers and tunes security platforms, develops automation, supports cloud operations and IAM hygiene, and documents technical controls for SOC 2 and client security audits. Ovative offers a hybrid arrangement: work from its Minneapolis, Chicago, or New York office on set days each week, with the option to work remotely on other days. The stated annual compensation range is $75,000–$93,000, inclusive of an annual bonus opportunity equal to 15% of base salary.

Requirements

• Two-year or four-year degree in computer science, information security, technology, or a related field, or at least 3 years of equivalent experience.
• 2–5 years of experience in security operations, security engineering, site reliability engineering, or a similar hands-on role; title and level will be commensurate with experience.
• Experience with vulnerability management tools and remediation workflows.
• Working knowledge of GCP and/or Azure security services and configurations.
• Familiarity with IAM, secrets management, and network security concepts in cloud environments.
• Proficiency in shell scripting and Python, TypeScript, Go, or similar programming languages.
• Hands-on experience using generative AI tools in daily work and a strong interest in securing them.
• Experience with modern DevSecOps practices and technologies, including GitHub, Jira, and Confluence.
• Experience operating across cloud-native security and enterprise productivity environments, including GCP, Azure, and M365.
• Strong analytical and problem-solving skills and high attention to detail.
• Ability to communicate and champion security concepts and practices clearly to developers, data engineers, data scientists, and technical and non-technical leadership.
• Applicants must be legally authorized to work in the United States for any employer on a full-time basis, without current or future need for visa sponsorship.

Nice To Haves

• Security certifications such as CCSP, CEH, GSEC, or GCIH.
• Experience with infrastructure-as-code tools such as Terraform, Ansible, or Puppet.
• Hands-on experience with CSPM platforms such as Wiz or Lacework and with SIEM platforms.
• Experience with containerization technologies such as Kubernetes and Docker.
• Hands-on experience with MCP servers, agent frameworks, or other applied AI security work.
• Familiarity with AI security frameworks and guidance such as OWASP GenAI Security and NIST AI RMF.
• Experience securing personal information or other regulated data.
• Exposure to security administration of BigQuery, Databricks, or similar data platforms.

Responsibilities

• Monitor security tooling and alerts across endpoint, cloud, and network environments; triage and escalate alerts as appropriate.
• Analyze logs and investigate security incidents to identify and scope their impact.
• Support incident response and business continuity plan execution, including tabletop exercises and post-incident reviews.
• Support managed detection and response partner relationships and act on partner recommendations.
• Participate in root cause analyses of security findings, identify contributing factors, and implement permanent fixes.
• Monitor threat intelligence feeds and translate relevant findings into action for the team.
• Operate and monitor vulnerability scanning tools; track and remediate findings or document exceptions.
• Prioritize remediation based on risk scoring and asset criticality.
• Coordinate with engineering and IT teams on timely patching and hardening of cloud and endpoint systems.
• Support penetration testing engagements by coordinating logistics, tracking findings, and driving remediation to closure.
• Help build, secure, and monitor infrastructure supporting AI adoption, including MCP servers, agent policy and proxy services, and connector integrations.
• Review, harden, and productionize AI-assisted and internally built applications and automations before they access production data.
• Conduct technical evaluations of AI vendors and tools with the Security Analyst, including secure configuration, integration review, and onboarding.
• Implement guardrails and monitoring for AI tools and agents, including logging, data protection, and identity for non-human actors.
• Stay current on AI security research and practices, including OWASP GenAI Security, prompt injection, and agentic risks; recommend tooling and secure design patterns.
• Provide hands-on guidance and training to teams building and working with AI tools, agents, and frameworks.
• Administer and tune security tools, including SIEM, vulnerability scanners, EDR, and CSPM platforms.
• Build and maintain automation and scripts using Python, Bash, or similar tools to streamline security operations and reduce manual work.
• Support day-to-day cloud operations and IAM hygiene across GCP and Azure in partnership with cloud security and infrastructure engineers.
• Document and provide evidence for technical controls in support of SOC 2 and client security audits.
• Evaluate and recommend new security tools in partnership with the Head of Information Security.

Benefits

• Competitive compensation and an annual bonus program; the stated annual bonus opportunity is 15% of base salary.
• Health insurance options, inclusive of same-sex partners.
• 401(k) matching program.
• Generous paid vacation policy.
• Family formation benefits, including reimbursement options for fertility, pregnancy, and parenting needs.
• Monthly stipend for mobile phone and data plan.
• Sabbatical program.
• Charitable giving through time and a financial match program.
• Frequent paid travel to the Minneapolis headquarters for company and team events and in-person collaboration.
• Access to office spaces in Minneapolis, New York City, and Chicago.
• Flexible hybrid work arrangement, with remote work available on days not designated for office work.
• Inclusive medical leave coverage for same-sex spouses and equitable care and support for families.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree