Security Operations (SecOps) Engineer

Daxko•Birmingham, AL

3h•Remote

About The Position

The Security Operations Engineer protects the networks behind Daxko’s products across production and non-production environments and builds automation to make audits faster. The role supports the network and compliance needs of products and customers and reports to the Director of Information Security. The engineer implements and monitors security measures, defines security requirements, maintains security policies and standard operating procedures, and builds technical solutions to address vulnerabilities and automate repeatable work. The position also involves deploying, configuring, and troubleshooting security software and hardware; evaluating firewalls and encryption technologies; monitoring systems and networks for intrusions; investigating alerts and incidents; and identifying root causes. Recurring work includes quarterly server-hardening reviews, quarterly internal penetration tests, and scans across all products for unencrypted credit card data. The engineer partners with the compliance team during audits and automates evidence collection. The role is desk-based and requires less than 10% travel.

Requirements

At least 3 years of experience in information security, including experience as a system security or information security engineer.
Hands-on experience building and maintaining security systems, including firewalls, intrusion detection, antivirus, authentication, log management, and content filtering.
Solid knowledge of network security, database and operating system security, and tools used to monitor them.
Familiarity with compliance frameworks such as PCI-DSS, SOC 1, SOC 2, and GDPR.
Working proficiency with AI tools relevant to security work.
A bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.

Nice To Haves

At least 5 years of experience in information security.
Experience with cloud services such as AWS or with colocation data centers.
Knowledge of security automation.
Certifications such as CISSP, CISM, CEH, or similar.
Exposure to the payment card or financial industries.

Responsibilities

Implement and monitor security measures that protect systems, networks, and data.
Define security requirements and write and maintain standard operating procedures and policies aligned with regulatory standards.
Build technical solutions using security tools to address vulnerabilities and automate repeatable work.
Deploy, configure, and troubleshoot security software and hardware.
Evaluate firewalls and encryption technologies to determine when they need replacing.
Monitor networks and systems for intrusions, research system and component alerts, and investigate incidents to identify root causes.
Conduct quarterly server-hardening reviews and internal penetration tests, and scan all products for unencrypted credit card data.
Partner with the compliance team during audits and automate evidence collection.