Senior Security Operations Engineer

Pilotbase • Overland Park, KS

3d • $120,000 - $130,000

About The Position

Pilotbase is a connected system bringing flight schools, pilots, and industry partners together in a data-driven network. The Senior Security Operations Engineer owns and operates hands-on security functions across endpoints, cloud, identity, applications, and vendor security. The Security Manager sets standards; this role implements controls, closes findings, conducts detection and response, and produces evidence for compliance programs. The engineer is accountable for security outcomes in assigned domains, including implementing and operating controls, enforcing service-level expectations, and evidencing that controls work. The role also researches options and proposes security designs and tooling, with responsibilities growing as the company scales.

The position covers end-to-end remediation of security findings; functional security controls; managed detection and response; audit evidence and recurring control operation; security tooling, design, and automation; and support for external assessors, vendor reviews, questionnaires, and awareness training. Occasional business travel of up to 10% may be required.

Applicants must be legally authorized to work in the United States. Pilotbase does not provide work visa sponsorship.

Requirements

• At least 5 years of full-time experience in an in-house security role, with hands-on ownership of controls in one or more relevant domains and a record of driving findings to verified closure.
• Experience with identity and access controls, including least privilege, privileged access, conditional access, and conducting access reviews.
• Detection and response experience using an EDR, SIEM, or managed provider, from triage through containment.
• Vulnerability management experience focused on verified closure rather than detection alone.
• Experience producing audit evidence for SOC 2, ISO 27001, HITRUST, PCI, or an equivalent framework as a deliverable.
• Endpoint management and hardening experience across macOS and Windows.
• Scripting skills in PowerShell, Python, or Bash, including API integration.
• Fluent daily use of major AI tooling platforms.
• Must be legally authorized to work in the United States; Pilotbase does not provide work visa sponsorship.

Nice To Haves

• Cloud security posture management experience in Azure or AWS.
• Experience deploying and monitoring data loss prevention beyond policy writing.
• Network security implementation experience, including segmentation, firewalls, VLANs, and VPNs.
• Direct work with a PCI-DSS QSA, ASV, or external auditor as the technical contact.
• Comfort presenting to all levels of the company, from executives to junior colleagues.
• Certifications such as CISSP, CISM, GIAC (GSEC, GCIH, GCIA), CompTIA Security+ or CySA+, Microsoft SC-200 or AZ-500, or AWS Certified Security Specialty.

Responsibilities

• Own security finding closure end to end: triage and prioritize findings against standards, drive remediation with platform owners, and verify closure.
• Manage and drive outcomes from penetration tests, vulnerability and posture scans, audit gaps, access reviews, and CVEs across the estate.
• Own security findings and their closure in domains managed by IT, DevOps, Engineering, or other platform owners, while holding those owners accountable for implementing fixes.
• Provide endpoint security direction and harden Tier 1 assets.
• Operate vulnerability and application security scanning and enforce its service-level agreements.
• Establish cloud security posture management and enforce its service-level agreements.
• Implement and operate data loss prevention prevention and monitoring controls.
• Implement and validate least-privilege, dual-control, and other access controls.
• Implement network security at the cloud edge alongside DevOps.
• Operate managed detection and response end to end, including day-to-day coordination with the provider.
• Serve as the first responder for security events, handling triage through closure.
• Investigate and prevent external phishing.
• Select, implement, and operate a SIEM when approved.
• Produce and package audit evidence for compliance frameworks, including SOC 2 Type II and PCI DSS v4, when automated collection is insufficient.
• Run recurring access review cycles and drive mitigation, remediation, or other corrections.
• Build controls to close audit gaps and provide evidence that the controls operate.
• Research, vet, and recommend security tools, and own their day-to-day use once approved.
• Draft solution designs for new controls and implement them upon approval.
• Support security architecture reviews for new services and integrations.
• Build and maintain automation to eliminate recurring manual work within the role's scope.
• Serve as the technical contact for the QSA, ASV, and external auditor, including the quarterly external scan cycle.
• Answer security questionnaires such as CAIQ and HECVAT using the evidence library and maintain that library.
• Review vendor security assessments.
• Support security awareness training, including internal phishing simulation campaigns and content recommended for approval.

Benefits

• Full benefits package, including medical, dental, vision, short-term disability, and life insurance.
• 401(k) plan.
• Equity Appreciation Plan.
• Flexible Time Off policy.
• Seven company-wide paid holidays and two floating holidays.
• Two wellness days.
• Employee Assistance Program.
• Professional Development Stipend.
• Home Office Stipend.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed