Sr Security Engineer I
About The Position
Jeppesen ForeFlight is seeking a hands-on security engineer to help secure its cloud environments. The role focuses on deploying and managing security tools across the company, collaborating with DevOps and engineering teams, and building automation that detects and fixes security issues. Most of the work involves building, deploying, and troubleshooting. The engineer will secure AWS and Azure environments, lead company-wide security tool rollouts, and own cloud security tooling such as Orca, Stacklet, and ProjectDiscovery. The role also involves building agentic workflows to detect, validate, and remediate issues, establishing secure defaults and infrastructure as code practices, troubleshooting across infrastructure and security systems, participating in an on-call rotation, and helping with incident response.
Requirements
- At least 5 years of experience in cloud security, DevOps, DevSecOps, or a similar field.
- Strong hands-on experience with AWS and Azure, ideally from a DevOps background.
- Experience with Docker and Kubernetes, including securing containerized workloads.
- Strong Linux and scripting skills.
- Experience leading projects and company-wide tool deployments.
- Experience building automated or agentic workflows using LLMs and scripting.
- General infrastructure as code experience, such as Terraform, GHaC, or Infraweave.
- Strong troubleshooting ability.
- Ability to explain complicated topics to non-technical audiences.
Nice To Haves
- Okta administration experience, including SSO/SAML, SCIM, and lifecycle automation.
- Experience with Orca, Stacklet, or ProjectDiscovery.
- CI/CD security experience, including GitHub Actions, pipeline security, and supply chain security.
- Experience in regulated environments, such as NIST 800-171, CMMC, or FedRAMP.
- Background in DevOps, systems administration, or IT support.
Responsibilities
- Secure AWS and Azure environments, including posture management, IAM, network controls, and remediation of misconfigurations.
- Lead security tool rollouts across the company from proof of concept through deployment and maintenance.
- Own and grow cloud security tooling, including Orca, Stacklet, and ProjectDiscovery.
- Build agentic workflows to detect, validate, and remediate security issues, applying fixes automatically or submitting them to owning teams as pull requests.
- Work with Engineering, DevOps, and IT to establish secure defaults and make infrastructure as code standard across the company.
- Troubleshoot issues across cloud infrastructure, identity, pipelines, and security tools.
- Participate in an on-call rotation and assist with incident response.
Benefits
- Medical, dental, and vision insurance with employer-paid health premiums.
- Open PTO policy.
- 401(k) with up to 10% company matching and immediate vesting.
- 12 weeks of paid parent leave.
- Flight training rewards.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
