Security Operations Engineer

Island•Dallas, TX

7d•Hybrid

About The Position

Island is hiring a Security Operations Engineer to own the day-to-day operation and continuous improvement of its vulnerability and compliance scanning program. The role supports Island’s security posture across commercial and FedRAMP environments and helps meet standards required by government and enterprise customers. The engineer will operate scanning tools across web applications, infrastructure and networks, and container/runtime environments; support FedRAMP continuous monitoring in US GovCloud; and work with compliance and engineering teams on findings, remediation, evidence, and reporting. The role also contributes to automation and process improvements as Island scales its security tooling. It is described as an entry point into a product security team, with opportunities for broader ownership and impact over time. This is a hybrid position requiring four days per week in the office at Island’s Coppell, Texas headquarters. The position requires US citizenship and the ability to work in Dallas, Texas, onsite, and within FedRAMP-regulated environments.

Requirements

1–3 years of experience in security operations, IT security, or a related field, or equivalent hands-on experience through internships, labs, or personal projects.
Hands-on familiarity with at least one vulnerability scanning tool, such as Burp Suite, Nessus, or Tenable, or a similar tool.
Basic understanding of AWS cloud infrastructure and containerized environments, including Kubernetes, Docker, or Chainguard.
Strong organizational skills and ability to manage multiple open findings and parallel workstreams.
Curious, self-driven mindset and desire to expand beyond a defined lane over time.
Clear and effective communication skills across Slack, Zoom, and email in a distributed team environment.
US citizenship and ability to work within FedRAMP-regulated environments.
Ability to work onsite in Dallas, Texas.

Nice To Haves

Exposure to structured compliance environments; familiarity with FedRAMP, NIST 800-53, or similar frameworks.
Exposure to Wiz.
Scripting or automation skills, such as Python or Bash.

Responsibilities

Operate and maintain vulnerability scanning tools for web applications, infrastructure and networks, and container/runtime environments.
Run scans on a regular cadence and on demand for releases, audits, and special initiatives.
Support FedRAMP continuous monitoring activities across US GovCloud environments.
Assist with evidence collection and compliance tracking, including NIST 800-53 controls and tools such as eMASS.
Triage scan results, identify and filter false positives, prioritize findings by risk, and open and track remediation tickets in Jira.
Partner with engineering teams to ensure SLA adherence and timely remediation.
Produce reports and compliance artifacts for internal stakeholders and external auditors.
Contribute to and maintain the compliance evidence repository.
Improve scanning workflows through automation, scheduling, alerting, and result normalization.
Collaborate with the SecOps Lead and broader product security team, contributing to sprint planning and cross-functional initiatives.