Sr Security Engineer I
About The Position
Jeppesen ForeFlight is seeking a hands-on security engineer to help secure its cloud environments. The role focuses on building, deploying, managing, and troubleshooting security tools; partnering with DevOps and engineering teams; and automating the detection and remediation of security issues. The engineer will secure AWS and Azure environments, lead company-wide security tool deployments, own and expand cloud security tooling, and build automated or agentic workflows that validate and remediate security findings. The role also involves establishing secure defaults and Infrastructure as Code practices, troubleshooting across infrastructure and security systems, participating in an on-call rotation, and helping with incident response.
Requirements
- At least 5 years of experience in cloud security, DevOps, DevSecOps, or a similar field.
- Strong hands-on experience with AWS and Azure, ideally with a DevOps background.
- Experience with Docker and Kubernetes, including securing containerized workloads.
- Strong Linux and scripting skills.
- Experience leading projects and company-wide tool deployments.
- Experience building automated or agentic workflows using LLMs and scripting.
- General Infrastructure as Code experience, such as Terraform, GHaC, or Infraweave.
- Strong troubleshooting ability.
- Ability to explain complicated topics to non-technical audiences.
Nice To Haves
- Okta administration, including SSO/SAML, SCIM, and lifecycle automation.
- Experience with Orca, Stacklet, or ProjectDiscovery.
- CI/CD security experience, including GitHub Actions, pipeline security, and supply chain security.
- Experience in regulated environments, such as NIST 800-171, CMMC, or FedRAMP.
- Background in DevOps, systems administration, or IT support.
Responsibilities
- Secure AWS and Azure environments, including posture management, IAM, network controls, and remediation of misconfigurations.
- Lead security tool rollouts across the company, from proof of concept through deployment and maintenance.
- Own and grow cloud security tooling, including Orca, Stacklet, and ProjectDiscovery.
- Build agentic workflows to detect, validate, and remediate security issues, applying fixes automatically or sending them to owning teams as pull requests.
- Work with Engineering, DevOps, and IT to establish secure defaults and make Infrastructure as Code standard practice.
- Troubleshoot issues across cloud infrastructure, identity, pipelines, and security tools.
- Participate in an on-call rotation and assist with incident response.
Benefits
- Medical, dental, and vision insurance with employer-paid health premiums.
- Open PTO policy.
- 401(k) with up to 10% company matching and immediate vesting.
- 12 weeks of paid parent leave.
- Flight Training Rewards.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
