SRE Security Engineer

OPENLANE•Carmel, IN

1d•Remote

About The Position

OPENLANE is hiring an SRE Security Engineer for its Site Reliability Engineering organization. The role is part of a new SRE Security Engineering team focused on closing the gap between security findings and their resolution. The engineer will work directly in cloud and identity platforms to remediate misconfigurations, vulnerabilities, and access issues across AWS, Azure, GCP, GitHub, Okta, and Active Directory, taking findings from detection through closure. The role includes validating and prioritizing findings, applying fixes, and coordinating production-impacting changes through SRE’s standard review and approval process. The engineer will take part in a rotating on-call responsibility for urgent security alerts requiring same-day action and will contribute to remediation playbooks and runbooks as the team matures. Success is measured by reducing the number of unresolved findings, shortening remediation time for critical issues, and preventing recurrence through root-cause fixes. AI assistants such as Claude, Gemini, and OpenAI/ChatGPT are used daily to help triage scan output, draft and review remediation scripts and infrastructure-as-code changes, and investigate root causes. The position is remote, with occasional team alignment meetings as needed. It reports to the SRE Director and partners with Security, SRE platform teams, Engineering Leadership and developers, and the SRE Security Engineering team.

Requirements

2 to 4 years of experience in SRE, cloud security, security engineering, or a closely related systems or security role.
Hands-on experience remediating security issues in at least two of AWS, Azure, GCP, GitHub, Okta, and Active Directory.
Core knowledge of identity and access management concepts, including RBAC/ABAC, least privilege, federation, and SSO, across cloud platforms and on-premises directory services.
Ability to interpret findings from vulnerability scanners and cloud security posture tools and translate them into prioritized, actionable remediation.
Working knowledge of cloud security posture management or vulnerability scanning tools, such as Ox, Upwind, Socket, or similar.
Technical ability to remediate issues across cloud and identity platforms, including policy and permission tightening, credential rotation or revocation, group and role cleanup, and network or security-group hardening.
Core SRE fundamentals, including Linux/Unix systems administration, networking, and infrastructure-as-code such as Terraform or equivalent.
Experience with infrastructure-as-code and container or orchestration platforms such as Docker and Kubernetes/EKS, sufficient to remediate infrastructure-level findings directly.
Experience participating in an on-call rotation and responding to production incidents.
Ability to own issues from intake through resolution, including coordinating changes with other engineering teams.
Active daily use of AI assistants such as Claude, Gemini, and OpenAI/ChatGPT to support investigation, triage, and remediation.

Nice To Haves

Direct experience with Ox, Upwind, or Socket.
Relevant cloud or identity certifications, such as AWS, Azure, GCP, or Okta certifications.
Scripting or automation experience with Python or Bash to remediate findings at scale.
Experience with observability and monitoring tools such as Grafana, CloudWatch, or Prometheus.

Responsibilities

Own end-to-end remediation of security findings from Ox, Upwind, Socket, vulnerability scans, and Security team reports across cloud and identity platforms.
Triage and validate incoming findings, distinguish true positives from noise, and prioritize work based on risk.
Remediate misconfigurations, vulnerabilities, access issues, and dependency findings across AWS, Azure, GCP, GitHub, Okta, and Active Directory.
Apply fixes such as tightening policies and permissions, rotating or revoking credentials, cleaning up groups and roles, and hardening networks and security groups.
Participate in a rotating on-call responsibility for urgent security alerts requiring same-day action.
Follow the SRE change-management process for production infrastructure changes, ensuring they are reviewed and approved before deployment.
Patch known vulnerabilities and dependency findings in supported cloud and identity systems.
Reduce unresolved security findings and time-to-remediate for critical issues, and reduce recurrence through root-cause fixes.
Contribute to remediation playbooks and runbooks, and share platform-specific expertise with Security and SRE.
Use AI assistants daily to support investigation, triage, and remediation.

Benefits

Medical, dental, and vision benefits.
Employer HSA contributions and FSA options in the US.
Immediately vested 401(k) with company match in the US or RRSP with company match in Canada.
Paid vacation, personal, and sick time.
Paid maternity and paternity leave in the US.
Employer-paid short-term disability, long-term disability, life insurance, and AD&D in the US.
Employee Assistance Program.
Employer-paid Leap into Service Day to volunteer.
Tuition reimbursement for eligible programs.
Opportunities to expand skills and share knowledge across a publicly traded global organization.
Internal promotions, diverse career paths, and opportunities for advancement.