5+ years of experience in security operations, focused on incident response, cloud security posture, or vulnerability management.
Experienced incident responder, skilled in triage, containment, and conducting post-mortems under pressure.
Strong knowledge of AWS (IAM, EC2, etc.), familiarity with GCP or Azure is advantageous; practical experience with CSPM tools, ideally Wiz, is required.
Excellent communication skills, able to articulate technical risks to both engineering and executive teams.
Knowledge of scripting to streamline processes and enhance operational efficiency is preferred.
Responsibilities
Lead incident response efforts in the US timezone, managing triage, containment, and post-incident reviews.
Enhance cloud security posture across multiple cloud environments, addressing misconfigurations and findings from security tools.
Oversee and improve vulnerability management protocols for various environments, with a focus on tracking and reporting.
Conduct FedRAMP continuous monitoring activities in GovCloud, ensuring compliance with NIST 800-53 standards.
Collaborate with global SecOps Lead on strategic planning, risk management, and the implementation of security improvements.
Benefits
Opportunity to work in a pivotal role for US security operations.
Engagement in complex and impactful security challenges, especially in FedRAMP environments.
Chance to collaborate with a global team of security professionals and contribute to strategic decisions.
Full Job Description
Description
As a Senior Security Operations Engineer at Island, you will be the security anchor for our US operations - owning incident response, cloud security posture, vulnerability management, and FedRAMP compliance across our commercial and GovCloud environments. You will operate as the US-side peer to our global SecOps Lead, driving both day-to-day execution and longer-term improvements to how we detect, triage, and close risk across the stack.
What You'll Do
Lead US-timezone incident response efforts, including triage, containment, investigation, stakeholder communication, and post-incident reviews.
Manage and improve cloud security posture across AWS, GCP, and Azure, including Wiz findings remediation, IAM exposure, misconfiguration management, and cloud detection engineering.
Own vulnerability management across web, infrastructure, and container environments, including prioritization, remediation tracking, and reporting.
Drive FedRAMP continuous monitoring activities for GovCloud environments, including evidence collection, POA&M tracking, audit support, and compliance operations aligned with NIST 800-53.
Partner with the global SecOps Lead on team strategy, tooling decisions, risk identification, and security improvement initiatives.
What You Bring
5+ years of experience in security operations, with hands-on depth across at least two of: incident response, cloud security posture, and vulnerability management.
Proven incident responder - comfortable leading triage and containment under pressure, writing clear timelines, and running post-mortems.
Solid AWS knowledge (IAM, EC2, EKS, S3, CloudTrail, GuardDuty); GCP or Azure experience a plus. Hands-on CSPM experience, preferably Wiz.
Strong communicator across async and sync - able to translate technical findings into business risk for engineering leads and senior stakeholders.
Scripting ability and mind-set to reduce manual overhead and build durable workflows is a plus.
Dallas, TX - US citizens only; ability to work in FedRAMP-regulated environments required.
Why Island?
Build in a category-defining company
Work on problems at the intersection of AI, security, and enterprise productivity
