5+ years of experience in security operations with expertise in at least two areas: incident response, cloud security posture, or vulnerability management.
Proven ability to lead incident response efforts, including triage and containment under pressure.
Experience with AWS services like IAM, EC2, EKS, S3, CloudTrail, and GuardDuty; GCP or Azure experience is an advantage.
Strong communication skills for translating technical findings into business-related risks for engineering and senior stakeholders.
Scripting skills to automate workflows and reduce manual processes are advantageous.
Responsibilities
Lead incident response efforts within US time zones, including triage, containment, and investigation.
Manage cloud security posture across AWS, GCP, and Azure, facilitating remediation of findings and misconfigurations.
Oversee vulnerability management across web, infrastructure, and container environments, ensuring effective prioritization and reporting.
Drive compliance and continuous monitoring activities for FedRAMP in GovCloud environments, tracking audits and evidence collection.
Collaborate with the global SecOps Lead on strategic initiatives, tooling selection, and risk management.
Benefits
Opportunity to be the primary security resource for US operations in a dynamic environment.
Work alongside a global SecOps team with exposure to diverse security strategies.
Engage in continuous learning and improvement initiatives within security operations.
Be a key player in ensuring compliance with FedRAMP regulations in FedRAMP-regulated environments.
Full Job Description
Description
As a Senior Security Operations Engineer at Island, you will be the security anchor for our US operations - owning incident response, cloud security posture, vulnerability management, and FedRAMP compliance across our commercial and GovCloud environments. You will operate as the US-side peer to our global SecOps Lead, driving both day-to-day execution and longer-term improvements to how we detect, triage, and close risk across the stack.
What You'll Do
Lead US-timezone incident response efforts, including triage, containment, investigation, stakeholder communication, and post-incident reviews.
Manage and improve cloud security posture across AWS, GCP, and Azure, including Wiz findings remediation, IAM exposure, misconfiguration management, and cloud detection engineering.
Own vulnerability management across web, infrastructure, and container environments, including prioritization, remediation tracking, and reporting.
Drive FedRAMP continuous monitoring activities for GovCloud environments, including evidence collection, POA&M tracking, audit support, and compliance operations aligned with NIST 800-53.
Partner with the global SecOps Lead on team strategy, tooling decisions, risk identification, and security improvement initiatives.
What You Bring
5+ years of experience in security operations, with hands-on depth across at least two of: incident response, cloud security posture, and vulnerability management.
Proven incident responder - comfortable leading triage and containment under pressure, writing clear timelines, and running post-mortems.
Solid AWS knowledge (IAM, EC2, EKS, S3, CloudTrail, GuardDuty); GCP or Azure experience a plus. Hands-on CSPM experience, preferably Wiz.
Strong communicator across async and sync - able to translate technical findings into business risk for engineering leads and senior stakeholders.
Scripting ability and mind-set to reduce manual overhead and build durable workflows is a plus.
Dallas, TX - US citizens only; ability to work in FedRAMP-regulated environments required.
Why Island?
Build in a category-defining company
Work on problems at the intersection of AI, security, and enterprise productivity
