Engineer - Security

IRALOGIX,Inc•Pittsburgh, PA

39d•Hybrid

About The Position

We’re hiring a Security Engineer to join our lean and highly collaborative security function. Reporting to the Director of Security, you’ll play a central role in identifying risks and driving security outcomes across AWS infrastructure, containerized applications, CI/CD pipelines, SaaS platforms, and endpoints. This role is ideal for a broad generalist with 2–4 years of experience—someone who is passionate about security, thrives in modern cloud environments, and wants to grow into a versatile engineer who touches AppSec, DevSecOps, endpoint security, and compliance. We’re looking for adaptability, curiosity, and a strong grasp of fundamentals over deep specialization.

Requirements

2–4 years of hands-on security, DevOps, or cloud engineering experience in modern environments.
Familiarity with AWS IAM, containers (ECS, EKS), Terraform, SSO (Okta), and CI/CD workflows.
Practical understanding of vulnerability management, secure coding, and cloud-native security tooling.
Experience working in small teams or startups where everyone wears multiple hats.
Comfort collaborating with developers, auditors, and cross-functional stakeholders.
An eagerness to learn and improve—especially around AppSec, cloud IAM, and CI/CD security.
Strong written and verbal communication skills.

Nice To Haves

Familiarity with Java, Python, Go, or Rust.
Experience securing GitHub Enterprise, Argos, Trivy, or other common DevSecOps tools.
Prior exposure to compliance frameworks like SOC 2, CIS, or CSA CCM.
Contributions to open source or personal security projects.

Responsibilities

Support secure configuration of AWS services.
Help develop identity and access guardrails across AWS and SaaS tools.
Partner with DevOps to improve image lifecycle hygiene and container security.
Work with engineering and platform teams to define security gates for CI/CD.
Help standardize secure build practices, secrets management, and artifact handling.
Support triage and remediation of vulnerabilities surfaced via cloud and endpoint scanners.
Engage with our SOC to respond to security events across cloud, identity, endpoint, and app layers.
Help developers address legacy library vulnerabilities and integrate secure coding practices.
Participate in threat modeling, secure SDLC planning, and code/toolchain reviews.
Assist in maintaining our SOC 2 Type II posture and mapping controls to frameworks (CSA CCM, CIS AWS).
Collaborate with auditors and internal stakeholders to evidence controls and risk mitigation.
Support Mac and Windows laptop security with device configuration/compliance management tools.
Help govern secure SaaS usage, enforce device compliance, and manage privilege escalation.
Contribute to internal security training, awareness campaigns, and documentation.
Champion a collaborative, secure-by-default culture across development and operations.