Security Operations Engineer

Critical Loop

3d • $120,000 - $165,000

About The Position

Critical Loop is hiring a Security Operations Engineer to own security across its AWS platform, corporate IT, and remote fleet of connected edge controllers. The role will build security controls, run detection and response, and translate compliance requirements into working systems as the company earns and maintains certifications, including ISO 27001 and CMMC Level 2. The team is small, so the engineer will make decisions about tooling and architecture and see them deployed in the field.

Requirements

• 5+ years of professional experience in infrastructure, systems, security, or software roles, including at least 2 years focused on security operations or security engineering.
• Strong Linux background across cloud and remote, embedded, or on-premise environments.
• Hands-on experience with infrastructure as code and configuration management on AWS, using Terraform, Ansible, or similar tools.
• Experience running incident response and vulnerability management in production.
• Experience implementing and documenting controls for a framework such as ISO 27001, SOC 2, or NIST SP 800-171.
• Scripting experience for automation; Python preferred.
• A practical approach to security that enables the team to ship.
• Must be a U.S. person (U.S. citizen, lawful permanent resident, or protected individual), as required for work involving Controlled Unclassified Information.
• Must not require immigration support now or in the future; Critical Loop does not provide visa sponsorship.

Nice To Haves

• CMMC Level 2 or NIST SP 800-171 experience, including system security plans, POA&Ms, SPRS scoring, or CUI enclaves.
• Security experience with operational technology, industrial, or energy systems.
• Working knowledge of authentication and authorization protocols such as OAuth, SAML, and OIDC, and PKI.
• Experience with CrowdStrike or similar EDR, and Vanta or a similar compliance platform.

Responsibilities

• Own the security posture of the distributed edge fleet, including hardened Linux baselines, secure provisioning and remote access, signed updates, and security telemetry.
• Build and maintain secure cloud and edge infrastructure as code, including network segmentation, secrets management, access control, and audit logging.
• Run detection and response, including EDR and cloud threat detection, alert triage, and leading incident response with the engineering team.
• Run vulnerability management across cloud services, software, and device firmware, including scoping penetration tests and remediation.
• Own the technical controls and evidence behind security certifications, and lead audits and assessments.
• Work with engineers on secure design, including device, service, and user authentication, CI/CD security, and reviews of new features.
• Support customer security reviews, write standards, and help with IT security as needed.

Benefits

• Equity ownership through stock options.
• Comprehensive medical, dental, and vision coverage through an HRA with a generous allowance.
• Retirement savings plan.
• Unlimited paid time off.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed