SRE Security Engineer (AWS)

Location: Remote employee based in the United States; listed location: Carmel, Indiana

Company

hirify.global is a technology, data, and innovation company operating a digital marketplace for wholesale used vehicles.

What you will do

• Own security findings from detection and triage through remediation and validation.
• Remediate misconfigurations, vulnerabilities, access issues, permissions, credentials, groups, roles, and network security controls across AWS, Azure, GCP, GitHub, Okta, and Active Directory.
• Interpret findings from Ox, Upwind, Socket, vulnerability scanners, and cloud security posture tools; distinguish true positives from noise and prioritize by risk.
• Participate in a rotating on-call schedule for urgent security alerts requiring same-day action.
• Follow SRE change-management procedures for production-impacting remediation and coordinate changes with Security, SRE, Engineering Leadership, and developers.
• Create remediation playbooks and runbooks, reduce recurring findings through root-cause fixes, and share platform expertise.

Requirements

• 2–4 years of experience in SRE, cloud security, security engineering, or a closely related systems/security role.
• Hands-on security remediation experience in at least two of AWS, Azure, GCP, GitHub, Okta, and Active Directory.
• Knowledge of identity and access management concepts, including RBAC/ABAC, least privilege, federation, and SSO, across cloud and on-premises directory services.
• Experience interpreting cloud security posture management or vulnerability scanning findings and converting them into prioritized remediation.
• Linux/Unix systems administration, networking, and infrastructure-as-code experience with Terraform or an equivalent tool.
• Experience with Docker and Kubernetes/EKS sufficient to remediate infrastructure-level findings directly.
• Experience owning issues from intake through resolution, coordinating changes with engineering teams, and participating in an on-call rotation for production incidents.
• Daily use of AI assistants such as Claude, Gemini, or OpenAI/ChatGPT for investigation, triage, remediation scripts, and infrastructure-as-code changes.

Nice to have

• Direct experience with Ox, Upwind, or Socket.
• Cloud or identity certifications in AWS, Azure, GCP, or Okta.
• Scripting or automation experience with Python or Bash.
• Experience with Grafana, CloudWatch, Prometheus, or similar observability and monitoring tools.

Culture & Benefits

• Remote work with occasional team alignment meetings as needed.
• Medical, dental, and vision benefits, including employer HSA contributions and FSA options in the US.
• US-specific benefits include an immediately vested 401(k) with company match, paid maternity and paternity leave, and employer-paid disability and life insurance.
• Paid vacation, personal, and sick time; Employee Assistance Program; and a paid volunteer service day.
• Tuition reimbursement and opportunities to expand skills and share knowledge across a publicly traded global organization.
• Culture of internal promotion, diverse career paths, and advancement.