SecOps Engineer (Aviation)

TL;DR

SecOps Engineer (Cybersecurity): Supporting the daily operation and improvement of the security program with an accent on infrastructure, cloud, and core security tooling. Focus on implementing technical changes for vulnerability remediation, monitoring XDR alerts, and ensuring compliance with SOC 2 and ISO standards.

Location: Remote (USA)

Company

Leading global provider of aviation software and information services with a focus on AI-driven predictive technology.

What you will do

• Configure and administer XDR dashboards, tune alerts, and coordinate agent updates.
• Monitor and triage security incidents including phishing and endpoint activity.
• Implement cloud security hardening and reduce environmental exposure by finding exposed endpoints and attack paths.
• Support technical remediation for SOC 2, ISO 27001, and ISO 42001 compliance efforts.
• Collaborate with IT, DevOps, and engineering teams to move security recommendations into actual implemented changes.
• Document procedures, technical findings, and remediation work clearly and accurately.

Requirements

• Must be based in the USA.
• Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field.
• Up to 3 years of hands-on experience in IT, software development, or system/network administration.
• Proficiency in scripting or automation using Python, PowerShell, or similar languages.
• Understanding of OWASP Top 10, Cloud security best practices, and the incident response lifecycle.
• Exposure to EDR/XDR alert triage and basic phishing email analysis.

Nice to have

• Security+, CySA+, OSCP or other related certifications.
• Hands-on Azure or AWS administration experience.
• Experience with infrastructure as code (IaC).
• Experience with vulnerability management.

Culture & Benefits

• AI-forward company culture that prioritizes innovation and creative application of emerging technologies.
• Fully remote work arrangement.
• Collaborative environment with a focus on customer-centric outcomes.
• Opportunity for high technical exposure across cloud, infrastructure, and compliance.