Jobs in the United States

25+ jobs

Save this search

Added 5 mins ago
Network Engineer III / Information Technologist III
Michigan State University
East Lansing, MI
…infrastructure initiatives that support teaching, research, and business operations across the university. Reporting to the Network Planning Manager, the Network Engineer III will primarily…
Added 5 mins ago
Watersheds & Stormwater Subdiscipline Leader Job Details | Black & Veatch Family of Companies
Black & Veatch
Ann Arbor, MI
Resource Management: Provide leadership to the Watersheds & Stormwater team (50+ professional staff in Specialized Services, within EDS) – guiding workload tracking, conflict resolution,…
Added 5 mins ago
Community Resilience Subdiscipline Leader Job Details | Black & Veatch Family of Companies
Black & Veatch
Ann Arbor, MI
Due to the existing team size (30 staff) and seller-SME (subject matter expert) structure within Specialized Services, the resource management responsibilities associated with this…
Added 29 mins ago
ZE
Product Engineer (Remote - US CT/ET)
Zen Educate
Remote, United States
- $130,000 to $190,000 USD / year
We are a small, but mighty team and so every engineer has the opportunity to make an outsized impact and put their stamp on what excellence looks like in practice. What do I mean by…
Added 41 mins ago
VH
Biomedical Equipment Support Specialist
Veterans Health Administration
Chesapeake, VA · Hampton, VA
- $41,341 to $98,530 USD / year
Biomedical Equipment Support Specialist (BESS) at the Hampton VA Medical requires the application of engineering and mechanical concepts and methodology to provide lifecycle management and…
Added 45 mins ago
AF
ARCHEOLOGIST (CULTURAL RESOURCES SPECIALIST) - DIRECT HIRE AUTHORITY
Air Force Materiel Command
Kelly AFB, TX · Lackland AFB, TX
- $76,463 to $118,204 USD / year
Air Force Installation Mission Support Center //Air Force Civil Engineer Center (AFCEC)//Environmental Quality Division (CZQ).
Added 47 mins ago
UC
Supervisory General Engineer
U.S. Coast Guard
Norfolk County, VA
- $108,019 to $140,426 USD / year
This vacancy is for a GS-0801-13, Supervisory General Engineer located in the Department of Homeland Security, U.S. Coast Guard, OPERATING LOCATION-SFLC IBCT PORT ENGINEER SECTION 2-ALAMEDA…
Added 50 mins ago
VH
Biomedical Engineer
Veterans Health Administration
Salisbury, NC
- $60,478 to $141,512 USD / year
Assignment. Employees serve in an entry level biomedical engineer career development position. It is expected that biomedical engineers at the entry level receive ongoing guidance from mor…
Added 56 mins ago
VH
Biomedical Engineer
Veterans Health Administration
Indianapolis, IN
- $116,537 to $151,502 USD / year
The Biomedical Engineer for Healthcare Technology Management Service at the Indianapolis VA Medical Center, provides biomedical engineering services to a complex, technically sophisticated,…
Added 1 hour ago
AM
FIRE CHIEF
Air Mobility Command
McConnell AFB, KS
- $106,437 to $138,370 USD / year
Ability to plan, organize, and direct the functions and mentor, motivate, and appraise the staff of an organization through subordinate supervisors. 5\. Ability to formulate and effectively…
Added 1 hour ago
SS
General Engineer
Space Systems Command
Peterson AFB, CO
- $129,096 to $197,200 USD / year
3. Knowledge of and skill in evaluating state-of-the-art and advancements in theory, application, technology, and policy affecting systems being developed, and in planning, organizing, and…
Added 2 hours ago
VH
Healthcare Engineer
Veterans Health Administration
Gainesville, FL
- $120,021 to $156,029 USD / year
The Healthcare Engineer (Energy Manager) works with the VAHC's Operations and Maintenance Section to analyze and improve utility system energy performance, initiate, and provide support for…
Added 2 hours ago
VH
Healthcare Engineer
Veterans Health Administration
West Haven, CT
- $75,004 to $169,384 USD / year
This position serves the VA Connecticut Healthcare System (VACT) Facilities team as a Healthcare Engineer supporting design and construction at our medical centers and Community Based…
Added 2 hours ago
J
Technical Architect Senior
Jobgether
Remote, United States
- $201,950 USD / year
…oversee the platform's development, testing, and production operations while driving performance, automation, and continuous improvement. The position also involves shaping the technical…
Added 2 hours ago
SO
Assistant Attorney General/Senior Assistant Attorney General - NRE, Water Resources
State of Colorado
Denver, CO
- $89,964 to $150,556 USD / year
Advises agency leadership and staff regarding the interpretation and application of Colorado water law, administrative law, and related statutes affecting surface and ground water…
Added 2 hours ago
E T Consultant
World Bank Group
Washington, DC
…the primary platform for managing and reporting on trust fund operations, the Cofinancing Portal, AidFlows, and the Development Partner Center, which together support engagement with…
Added 3 hours ago
DO
Engineer, Water Resources
Department of Water Resources
CA
- $6,488 to $12,152 USD / month
…resources planning model by DWR and Reclamation to simulate operations of State Water Project (SWP) and Central Valley Project (CVP) as well as much of the water resources infrastructure in…
Added 3 hours ago
PS
Project Engineer (Staff, Senior, or Prinicpal) - Denver, CO
Public Service Co. of Colorado
Denver, CO
- $81,800 to $156,600 USD / year
Under general direction, this Project Engineer role will demonstrate complete understanding & wide application of engineering technical principle, theories, & concepts in the field.…
Added 3 hours ago
Staff Machine Learning Engineer（Risk Intelligence/AI Agent）
OKX
San Jose, CA
…strategy specialists, analytics engineers, product managers, and operations teams. You will work across the full ML lifecycle - from problem formulation, feature engineering, and model…
Added 3 hours ago
Manufacturing Engineer III
General Atomics
Acton, MA
We have an exciting opportunity for an Optical Payload Manufacturing Engineer to join our team in Acton, MA!
Added 3 hours ago
Data Warehouse Analyst
State of Massachusetts
Quincy, MA
Added 3 hours ago
Watersheds & Stormwater Subdiscipline Leader Job Details | Black & Veatch Family of Companies
Black & Veatch
Phoenix, AZ
Resource Management: Provide leadership to the Watersheds & Stormwater team (50+ professional staff in Specialized Services, within EDS) – guiding workload tracking, conflict resolution,…
Added 4 hours ago
CO
Mechanical Engineer 2
Commonwealth of Pennsylvania
Mechanicsburg, PA
- $80,646 to $104,959 USD / year
…The Department of Corrections (DOC) is seeking a Mechanical Engineer 2 to design, evaluate, and guide infrastructure projects that maintain safe, energy-efficient, and secure institutional…
Added 5 hours ago
HP-UX Engineer
US Tech Solutions
Jersey City, NJ
…validation, performance tuning and capacity management. Works with Operations staff to improve monitoring and alerting…
Added 5 hours ago
Manufacturing/Implementation Engineer
US Tech Solutions
Reedsville, PA
The successful candidate will be a hands-on implementation engineer for our new Manufacturing Execution System. Should possess strong understanding of production travelers/trackers/routers,…

SunCore Digital

Senior Security Operations Engineer

Remote, United States

$165,000 to $205,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $165,000 to $205,000 USD / year
Posting language: English

Original job description

Senior Security Operations Engineer About the Role SunCore Digital is seeking a hands-on Senior Security Operations Engineer to assess and improve the security of our applications, cloud environments, development practices, identities, data, and operational tooling. This role will establish practical security standards, build and harden shared security controls, investigate risk, and review security-impacting implementations produced by reliability, recovery, DevOps, and application teams. System-owning teams remain responsible for remediating their applications and services and for operating routine system-specific controls after enablement. This is not a role that manually approves every normal software release. Security review will focus on defined risk areas, including changes involving privileged access, sensitive data, recovery systems, network exposure, secrets, infrastructure, authentication, authorization, and security controls.

Responsibilities

Security assessment

Assess the current security posture across web applications, Flutter mobile applications, APIs, backend services, cloud infrastructure, repositories, CI/CD, databases, and integrations.
Inventory externally accessible services and endpoints.
Identify vulnerabilities, insecure defaults, excessive permissions, unmanaged credentials, and control gaps.
Distinguish confirmed findings from suspected risks and unassessed areas.
Prioritize findings based on exploitability, potential impact, exposure, and launch relevance.
Define remediation requirements and work with system owners, who implement and maintain application- and service-specific fixes. Implement shared security controls where the control belongs to the security function.
Verify that critical findings are resolved effectively.

Identity and access management

Review access to cloud accounts, repositories, databases, CI/CD systems, production environments, and third-party services.
Identify former employee, contractor, shared, excessive, or undocumented access.
Establish least-privilege and access-review practices.
Review service accounts, machine identities, API credentials, and privileged roles.
Define and harden credential lifecycle requirements, and work with DevOps, platform staff, and system owners to implement appropriate issuance, storage, rotation, revocation, and emergency-access mechanisms.
Ensure critical access activity is logged where appropriate.
Support role-based access and authorization reviews.

Application and API security

Review authentication, authorization, session management, permissions, and data isolation.
Assess exposed APIs, input handling, file processing, sensitive-data handling, and administrative functions.
Independently assess high-risk negative-access paths and direct access to restricted endpoints.
Work with QA and developers to convert repeatable security scenarios into regression coverage owned by the applicable delivery team.
Review changes involving sensitive workflows or new public exposure.
Help establish secure coding and review expectations.
Support threat modeling for critical workflows and material architectural changes.

Mobile security

Assess mobile authentication, session handling, secure storage, API access, application permissions, logging, and sensitive-data exposure.
Review risks related to device storage, screenshots, notifications, local caches, and mobile configuration.
Work with the Mobile QA Engineer and mobile developers on security-related testing.
Review mobile release practices where they affect application security.

Security tooling and automation

Define, implement, and harden security-specific automation, including dependency scanning, secret scanning, static analysis, vulnerability scanning, and container or infrastructure scanning where appropriate; establish the long-term owner for each shared control before handoff.
Define security policies, rules, and acceptance thresholds; work with DevOps to integrate shared controls into CI/CD and with repository owners to maintain application-specific configuration.
Establish actionable security gates based on severity and context, while system owners remain responsible for remediation.
Avoid creating low-value controls that block delivery without reducing material risk.
Improve security finding visibility and reporting.
Define exception and escalation procedures.
Track critical remediation through verification.

Review of reliability and recovery implementations

Review security-impacting SRE and Disaster Recovery implementations before production adoption.
Evaluate changes involving:
Privileged automation
Service accounts
Secrets
Backup data
Recovery access
Network or firewall configuration
Infrastructure permissions
Failover paths
Sensitive logging or monitoring
Review DevOps, dashboard, and internal-tooling changes when they affect access, production data, infrastructure, or security controls.
Validate that operational improvements do not introduce avoidable security exposure.

Security operations and incident readiness

Establish security monitoring and escalation requirements.
Develop security incident-response procedures and runbooks.
Define initial security incident severity and notification paths.
Investigate security events and suspicious activity.
Support evidence preservation and technical incident analysis.
Conduct or coordinate security exercises.
Track post-incident corrective actions.
Ensure security runbooks are tested by qualified staff.

Data and vendor security

Identify where sensitive, personal, financial, or operational data is stored and transmitted.
Review encryption in transit and at rest.
Assess retention, deletion, export, logging, and access behavior.
Review third-party services that receive code, credentials, operational data, or sensitive information.
Support vendor security review based on business risk.
Help identify security and privacy obligations that require legal or compliance input.

Collaboration

Work with developers to remediate application findings.
Work with SRE on logging, monitoring, incident readiness, and security-relevant reliability controls.
Work with the Disaster Recovery and Resilience Engineer on backup, restoration, emergency access, and recovery security.
Define security requirements for CI/CD and shared infrastructure; work with DevOps and platform staff to implement them, and with system owners to maintain application-specific configuration.
Work with QA on permissions, authorization, data isolation, and regression scenarios.
Provide clear technical findings and risk information to leadership.

Initial Priorities

Inventory production access, service accounts, secrets, and publicly accessible endpoints.
Review former employee, contractor, and shared access.
Establish and harden shared dependency- and secret-scanning capabilities, coordinate CI/CD integration with DevOps, and assign remediation ownership to the applicable repository teams.
Assess authentication, authorization, and customer-data isolation.
Review critical cloud and infrastructure permissions.
Identify launch-critical security findings.
Establish security review triggers for high-risk changes.
Implement initial security monitoring and incident procedures.
Review SRE and recovery mitigations that affect production security.
Create a factual security-readiness assessment.

Required Qualifications

Five or more years of experience in security engineering, DevSecOps, cloud security, application security, security operations, or a comparable role.
Hands-on experience remediating security issues.
Experience securing cloud-hosted applications and infrastructure.
Experience reviewing authentication, authorization, permissions, and data isolation.
Experience with CI/CD security integration.
Experience with vulnerability, dependency, secret, and static-analysis tooling.
Strong understanding of identity, access, service accounts, secrets, and least privilege.
Experience reviewing web applications and APIs.
Familiarity with mobile application security.
Experience with security monitoring and incident response.
Ability to assess third-party and operational security risks.
Strong technical documentation and communication skills.
Ability to distinguish confirmed vulnerabilities, suspected risks, and unassessed areas.
Comfort working in a small organization where security practices are still being established.

Bonus Points

Experience preparing a platform for its first external users.
Experience establishing security practices in a startup or small engineering organization.
Familiarity with crypto, fintech, digital assets, KYC, AML, or payment-related systems.
Experience with Flutter or mobile application security.
Experience securing disaster-recovery, backup, or privileged automation systems.
Experience with infrastructure as code or containerized platforms.
Experience in a remote, asynchronous environment.

What Success Looks Like

Production access, privileged identities, service accounts, and secrets are inventoried.
Former and excessive access is removed.
Critical repositories and systems have appropriate automated security scanning.
Authentication, authorization, and data-isolation risks are understood.
Launch-critical security findings are visible and remediated or explicitly accepted.
Security-impacting SRE and recovery implementations are reviewed before adoption.
Security controls are practical, documented, and integrated into engineering workflows.
The organization has a tested security incident process.
Security does not depend on undocumented knowledge or manual review of every routine release.

Compensation & Benefits

Base Compensation: Competitive, based on experience, portfolio strength, and geographic location.
Milestone Bonuses: 10% milestone bonus awarded to every team member assisting with the MVP build-out.
Annual Performance Bonus: Represents a significant percentage of total compensation.
Benefits for Domestic Hires: Health, dental, and vision plans.
Annual Paid Offsite: Team retreats in Caribbean, Hawaii, ski destinations, and other exciting locations.

Why Join SunCore Digital?

High-impact role in a rapidly scaling digital company.
Fully remote team with async flexibility.
Direct collaboration with executive leadership and best-in-class marketing/design partners.
Opportunity to shape Security processes and mentor junior team members.
Competitive compensation with performance upside.

Apply About employer

Report this job