SRE Security Engineer

OPENLANE•Carmel, IN

2d•Remote

About The Position

OPENLANE is hiring an SRE Security Engineer for its Site Reliability Engineering organization. The role is part of a new SRE Security Engineering team focused on taking security findings from detection through resolution. The engineer will work directly within cloud and identity platforms to remediate misconfigurations, vulnerabilities, and access issues across AWS, Azure, GCP, GitHub, Okta, and Active Directory, closing the gap between reported security issues and completed fixes. The position involves validating and prioritizing findings, carrying out remediation, and reducing both the volume and recurrence of unresolved security issues. The engineer will participate in a rotating on-call schedule for urgent security alerts and follow SRE change-management requirements for production-impacting work. AI assistants such as Claude, Gemini, and OpenAI/ChatGPT are used daily to support investigation, triage, scan analysis, and remediation work. This is a remote role with occasional team alignment meetings. The position reports to the SRE Director and works closely with Security, SRE platform teams, Engineering Leadership and developers, and the broader SRE Security Engineering team.

Requirements

2 to 4 years of experience in SRE, cloud security, security engineering, or a closely related systems or security role.
Hands-on experience remediating security issues in at least two of AWS, Azure, GCP, GitHub, Okta, or Active Directory.
Core knowledge of identity and access management concepts, including RBAC/ABAC, least privilege, federation, and SSO, across cloud platforms and on-premises directory services.
Experience interpreting findings from vulnerability scanners and cloud security posture tools and translating them into prioritized, actionable remediation.
Working knowledge of cloud security posture management or vulnerability scanning tools and ability to assess and act on their findings.
Experience owning issues from intake through resolution, including coordinating changes with other engineering teams.
Experience with infrastructure-as-code such as Terraform or equivalent, and container or orchestration platforms such as Docker and Kubernetes/EKS, sufficient to remediate infrastructure-level findings directly.
Core SRE fundamentals, including Linux/Unix systems administration and networking.
Experience participating in an on-call rotation and responding to production incidents.
Active daily use of AI assistants such as Claude, Gemini, and OpenAI/ChatGPT to support investigation, triage, and remediation.

Nice To Haves

Direct experience with Ox, Upwind, or Socket.
Relevant cloud or identity certifications, such as AWS, Azure, GCP, or Okta certifications.
Scripting or automation experience with Python or Bash to remediate findings at scale.
Experience with observability and monitoring tools such as Grafana, CloudWatch, or Prometheus.

Responsibilities

Remediate security findings from Ox, Upwind, Socket, vulnerability scans, and Security team reports across cloud and identity platforms.
Triage and validate incoming findings, distinguish true positives from noise, and prioritize work according to risk.
Make platform changes such as tightening policies and permissions, rotating or revoking credentials, cleaning up groups and roles, and hardening network and security-group configurations.
Participate in a rotating on-call responsibility for urgent security alerts requiring same-day action.
Follow the SRE change-management process for remediation affecting production infrastructure, ensuring changes are reviewed and approved before deployment.
Patch known vulnerabilities and dependency findings across AWS, Azure, GCP, GitHub, Okta, and Active Directory systems.
Reduce unresolved findings and time-to-remediate for critical issues, and address root causes to reduce recurrence.
Contribute remediation playbooks and runbooks and share platform-specific expertise with Security and SRE.
Use AI assistants daily to triage and summarize scan output, draft and review remediation scripts and infrastructure-as-code changes, and investigate root causes.

Benefits

Competitive pay.
Medical, dental, and vision benefits with employer HSA contributions in the US and FSA options in the US.
Immediately vested 401(k) in the US or RRSP in Canada, with company match.
Paid vacation, personal, and sick time.
Paid maternity and paternity leave in the US.
Employer-paid short-term disability, long-term disability, life insurance, and AD&D in the US.
Robust Employee Assistance Program.
Employer-paid Leap into Service Day to volunteer.
Tuition reimbursement for eligible programs.
Opportunities to expand skills and share knowledge across a publicly traded, global organization.
Company culture of internal promotions, diverse career paths, and meaningful advancement.