Security & Compliance Engineer

What you'll do

• Design and automate compliance workflows to reduce manual effort in control monitoring and evidence gathering.
• Manage the organization's compliance posture against frameworks such as SOC 2 and FedRAMP.
• Build automated compliance tooling to continuously monitor controls and flag security gaps.
• Integrate compliance requirements and checks into CI/CD pipelines and the secure software development lifecycle.
• Identify control gaps and perform readiness assessments for external audits.
• Map core security principles like IAM and encryption to specific compliance controls.
• Monitor compliance across cloud infrastructure, containerization, and identity management systems.
• Articulate compliance requirements, risks, and remediation plans to technical and non-technical stakeholders.

What we're looking for

• Bachelor's Degree in Computer Science, Information Security, or equivalent work experience.
• Master's Degree (preferred).
• 4+ years of experience in compliance, security engineering, audit, or related roles.
• Direct experience in SOC 2 compliance programs, including control design, evidence collection, and supporting external audits.
• Experience building or operating compliance automation tooling to monitor controls and collect evidence.
• Solid understanding of IAM, data encryption, vulnerability management, and security incident response.
• Experience with cloud infrastructure (IBM Cloud), containerization (Docker, Kubernetes), and cloud-based identity management.
• Experience in DevSecOps or secure SDLC environments, integrating compliance checks into CI/CD pipelines.
• Experience supporting FedRAMP, including NIST SP 800-53 controls and system security plans (preferred).
• Experience developing automation solutions using Python, Bash, or similar scripting languages (preferred).