Security Engineer

Ovative Group • Minneapolis, MN

4d • $75,000 - $93,000 • Hybrid

About The Position

Ovative Group is seeking a Security Engineer to join its Information Security team. Reporting to the Lead Security & Cloud Engineer, the role owns day-to-day security operations, threat and vulnerability management, and security tooling. It also has a hands-on role in securing the company’s adoption of AI across the business. The position operates across cloud-native and enterprise productivity environments, including GCP, Azure, M365, and AWS.

The Security Engineer monitors and investigates security events, supports incident response and business continuity, manages vulnerabilities and remediation, and helps secure AI infrastructure, applications, tools, and agents. The role also administers and improves security tooling, builds operational automation, supports cloud operations and IAM hygiene, documents technical controls for SOC 2 and client audits, and evaluates security tools. The position is based on a hybrid schedule, working from the Minneapolis, Chicago, or New York office on set days each week and remotely on other days.

Requirements

• Two-year or four-year degree in computer science, information security, technology, or a related field, or at least 3 years of equivalent experience.
• 2–5 years of experience in security operations, security engineering, site reliability engineering, or a similar hands-on role; title and level will be commensurate with experience.
• Experience with vulnerability management tools and remediation workflows.
• Working knowledge of GCP and/or Azure security services and configurations.
• Familiarity with IAM, secrets management, and network security concepts in cloud environments.
• Proficiency in shell scripting and Python, TypeScript, Go, or similar programming languages.
• Hands-on experience using generative AI tools in daily work and a strong interest in securing them.
• Experience with modern DevSecOps practices and technologies such as GitHub, Jira, and Confluence.
• Experience operating across cloud-native security and enterprise productivity environments, including GCP, Azure, and M365.
• Strong analytical and problem-solving skills and high attention to detail.
• Ability to communicate and champion security concepts and practices clearly to developers, data engineers, data scientists, and technical and non-technical leadership.
• Legally authorized to work in the United States for any employer on a full-time basis, without current or future need for visa sponsorship.

Nice To Haves

• Security certifications such as CCSP, CEH, GSEC, or GCIH.
• Experience with infrastructure-as-code tools such as Terraform, Ansible, or Puppet.
• Hands-on experience with CSPM platforms such as Wiz or Lacework and SIEM platforms.
• Experience with containerization technologies such as Kubernetes and Docker.
• Hands-on experience with MCP servers, agent frameworks, or other applied AI security work.
• Familiarity with AI security frameworks and guidance such as OWASP GenAI Security and NIST AI RMF.
• Experience securing personal information or other regulated data.
• Exposure to security administration of BigQuery, Databricks, or similar data platforms.

Responsibilities

• Monitor security tooling and alerts across endpoint, cloud, and network environments; triage and escalate as appropriate.
• Analyze logs and investigate security events to identify and scope incident impact.
• Support incident response and business continuity plan execution, including tabletop exercises and post-incident reviews.
• Support managed detection and response partner relationships and act on partner recommendations.
• Participate in root cause analyses for security findings, identify contributing factors, and implement permanent fixes.
• Monitor threat intelligence feeds and turn relevant findings into action for the team.
• Operate and monitor vulnerability scanning tools, track and remediate findings, and document exceptions.
• Prioritize remediation based on risk scoring and asset criticality.
• Coordinate with engineering and IT teams on timely patching and hardening of cloud and endpoint systems.
• Support penetration testing engagements by coordinating logistics, tracking findings, and driving remediation to closure.
• Help build, secure, and monitor infrastructure supporting AI adoption, including MCP servers, agent policy and proxy services, and connector integrations.
• Review, harden, and productionize AI-assisted and internally built applications and automations before they access production data.
• Perform technical AI vendor and tool evaluations with the Security Analyst, including secure configuration, integration review, and onboarding.
• Implement guardrails and monitoring for AI tools and agents, including logging, data protection, and identity for non-human actors.
• Stay current on AI security research and practices, including OWASP GenAI Security, prompt injection, and agentic risks; recommend tooling and secure design patterns.
• Provide hands-on guidance and training for teams building and working with AI tools, agents, and frameworks.
• Administer and tune SIEM, vulnerability scanning, EDR, and CSPM tools.
• Build and maintain automation and scripts in Python, Bash, or similar languages to streamline security operations and reduce manual work.
• Support day-to-day cloud operations and IAM hygiene across GCP and Azure in partnership with cloud security and infrastructure engineers.
• Document and provide evidence for technical controls in support of SOC 2 and client security audits.
• Evaluate and recommend new security tools in partnership with the Head of Information Security.

Benefits

• Annual bonus opportunity of 15% of base salary.
• Health insurance options, including coverage for same-sex partners.
• Family formation benefits, including reimbursement options for fertility, pregnancy, and parenting needs.
• Generous paid vacation policy.
• 401(k) match program.
• Monthly stipend for mobile phone and data plan.
• Sabbatical program.
• Charitable giving program with time and financial matching.
• Access to office spaces in Minneapolis, New York City, and Chicago.
• Frequent paid travel to the Minneapolis headquarters for company and team events and in-person collaboration.
• Shenanigan’s Day.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree