Company: IRALOGIX, Inc.
Position: Security Engineer
Location: Charlette, NC or Pittsburgh, PA
Job Type: Full-Time/Exempt
Industry: Retirement Services/FinTech Software
Travel: 0%-5%
Role Overview
We're hiring a Security Engineer to join our lean and highly collaborative security function. Reporting to the Director of Security, you'll play a central role in identifying risks and driving security outcomes across AWS infrastructure, containerized applications, CI/CD pipelines, SaaS platforms, and endpoints.
This role is ideal for a broad generalist with 2-4 years of experience-someone who is passionate about security, thrives in modern cloud environments, and wants to grow into a versatile engineer who touches AppSec, DevSecOps, endpoint security, and compliance. We're looking for adaptability, curiosity, and a strong grasp of fundamentals over deep specialization.
Key Responsibilities
• Cloud Security & IAM
• Support secure configuration of AWS services.
• Help develop identity and access guardrails across AWS and SaaS tools.
• Partner with DevOps to improve image lifecycle hygiene and container security.
• CI/CD Security
• Work with engineering and platform teams to define security gates for CI/CD.
• Help standardize secure build practices, secrets management, and artifact handling.
• Vulnerability & Threat Management
• Support triage and remediation of vulnerabilities surfaced via cloud and endpoint scanners.
• Engage with our SOC to respond to security events across cloud, identity, endpoint, and app layers.
• Application Security
• Help developers address legacy library vulnerabilities and integrate secure coding practices.
• Participate in threat modeling, secure SDLC planning, and code/toolchain reviews.
• Governance & Compliance
• Assist in maintaining our SOC 2 Type II posture and mapping controls to frameworks (CSA CCM, CIS AWS).
• Collaborate with auditors and internal stakeholders to evidence controls and risk mitigation.
• Endpoint & SaaS Security
• Support Mac and Windows laptop security with device configuration/compliance management tools.
• Help govern secure SaaS usage, enforce device compliance, and manage privilege escalation.
• Education & Culture
• Contribute to internal security training, awareness campaigns, and documentation.
• Champion a collaborative, secure-by-default culture across development and operations.
JOB DESCRIPTION
You Might Be a Fit If You Have...
• 2-4 years of hands-on security, DevOps, or cloud engineering experience in modern environments.
• Familiarity with AWS IAM, containers (ECS, EKS), Terraform, SSO (Okta), and CI/CD workflows.
• Practical understanding of vulnerability management, secure coding, and cloud-native security tooling.
• Experience working in small teams or startups where everyone wears multiple hats.
• Comfort collaborating with developers, auditors, and cross-functional stakeholders.
• An eagerness to learn and improve-especially around AppSec, cloud IAM, and CI/CD security.
• Strong written and verbal communication skills.
Bonus Points For...
• Familiarity with Java, Python, Go, or Rust.
• Experience securing GitHub Enterprise, Argos, Trivy, or other common DevSecOps tools.
• Prior exposure to compliance frameworks like SOC 2, CIS, or CSA CCM.
• Contributions to open source or personal security projects.
Work Setup & Culture
• Hybrid model: 3-4 days/week in our Charlotte, NC or Pittsburgh, PA office
• Flexible and team-driven environment with high autonomy
• Emphasis on learning, adaptability, and cross-functional support
• No formal on-call, but expectation to assist during major incidents
What We Value
We care far more about aptitude, curiosity, and flexibility than traditional degrees or certifications. Whether you've come from an enterprise, a bootcamp, or built your skills in your home lab-we want people who can grow with us, solve problems with empathy, and help secure an evolving, cloud-first fintech platform.
