Job Title: Security Operations Engineer
About Acadaca:
Acadaca is a full-service digital agency that builds and manages sophisticated technology solutions for leading brands. We are a group of strategists, engineers, and creatives who thrive on solving complex problems and delivering performance-driven results.
Our mission is to serve as a genuine extension of our client's teams. That starts with creating a place where everyone can do their best work. Our engineering team is fully US-based and operates in a small pod structure of mid-to-senior talent, ensuring that whether you're building our platforms or securing them, you are empowered to make a significant impact.
About the Role:
We are looking for a SecOps Engineer to join our Technical Operations team. In this role, you will be responsible for executing the security operations that protect company and client assets. You will monitor for security anomalies, manage our vulnerability program, and ensure the overall security of our corporate and production systems. You will work closely with our DevOps and Platform Engineering teams to support compliance audits, optimize our security tooling, and handle security incidents as they arise.
This is a remote role, with a concentration of team members on the East Coast.
What You Will Do:
- Run vulnerability scans across our internal platforms and cloud infrastructure, and manage the end-to-end remediation process.
- Monitor security alerts and respond to potential threats, acting as a key defender of our corporate and platform environments.
- Implement and maintain automated security checks within our CI/CD pipelines to ensure code is secure from the start.
- Assist with compliance audits (e.g., PCI, SOC2) by gathering evidence, documenting controls, and collaborating with Engineering and leadership.
- Perform security reviews of new infrastructure, applications, and third-party integrations to identify potential risks.
- Continuously enhance security operations by improving detections, refining security tooling, and rigorously managing key security partners.
- Manage and enhance our endpoint security posture (EDR, configuration, and management) and internal security tooling to strengthen Acadaca's overall security framework.
About You:
- Extensive experience in security operations, including vulnerability management, security monitoring, and incident response.
- Strong knowledge of cloud infrastructure and security best practices for securing production platforms.
- Hands-on experience with compliance frameworks and audits, particularly PCI and/or SOC2.
- Proficiency in managing security tooling such as SIEM, EDR, and vulnerability scanners.
- Experience implementing security controls within CI/CD pipelines.
- Proficiency in at least one scripting language (e.g., Python, Bash) to automate security tasks.
- Proficiency in at least one compiled language (e.g., Rust, Java) to perform code security audits and recommendations.
- Strong endpoint management skills across multiple operating systems.
Bonus If You:
- Have experience working in a fast-paced, agency-side environment.
- Have experience securing e-commerce platforms or other high-availability web applications.
- Are comfortable working collaboratively with senior developers to manage and mitigate risk.
Benefits:
- Competitive compensation package.
- Comprehensive Healthcare Package.
- Flexible Time Off.
- Learn and Grow - we provide mentorship and opportunities to help you build your network and skills in platform technology.
- We will provide you with the gear you need to do your role effectively in a remote setting.
