Senior Security Operations Engineer II

As a Senior Security Operations Engineer II, you will play a key role in building secure, reliable, and developer-friendly infrastructure that enables teams to move quickly without compromising security. You will solve complex technical challenges, improve system reliability through automation, and partner closely with engineering teams to scale security capabilities across the organization. In this role, you will design and develop security tools that support vulnerability management and secure software delivery pipelines, integrating security seamlessly into developer workflows. Your work will help reduce friction for developers while ensuring high standards for security, reliability, and operational efficiency across mission-critical systems.

Location: This role is based out of our Boston, MA office and follows a hybrid schedule. We rely on in-person collaboration and ask that team members work onsite Tuesdays through Fridays, with the flexibility to work remotely on Mondays, unless there is an approved workplace accommodation. We believe that connection fuels innovation, and our in-office culture is designed to foster meaningful teamwork, mentorship, and shared success.

Reports to: Manager, InfoSec Engineering
Direct Reports: 0

• Design, build, and operate secure, scalable infrastructure and developer-friendly security platforms.
• Own the security and operational health of Kubernetes platforms and container registries, including cluster provisioning, upgrades, hardening, policy enforcement, image security, and ongoing operational support.
• Develop and maintain in-house tools for vulnerability management and CMDB lifecycle management, enabling asset discovery, tracking, and remediation workflows.
• Design, provision, and manage AWS infrastructure that supports enterprise security services using infrastructure-as-code and cloud-native architectures.
• Enhance CI/CD systems with automated security testing, compliance checks, and deployment safeguards.
• Implement and improve Kubernetes security practices, including workload protection, policy enforcement, cluster hardening, and runtime monitoring.
• Troubleshoot and resolve complex operational and system-level issues across environments.
• Partner with engineering, platform, and SRE teams to ensure security solutions fit fast-moving development cycles.
• Contribute to infrastructure-as-code and automation initiatives to enforce secure configuration and reduce manual drift.
• Continuously evaluate emerging threats and tooling to strengthen defenses and developer productivity.
• Build and improve security tooling that integrates into developer workflows, including in-house systems to manage vulnerabilities and the CMDB (Configuration Management Database).
• Provision, maintain, and secure Kubernetes platforms and container registries, ensuring clusters are resilient, compliant, and aligned with security best practices.
• Implement automated security checks and guardrails in CI/CD pipelines to detect and prevent vulnerabilities early.
• Provision and maintain secure AWS infrastructure to support security platforms and services, leveraging infrastructure-as-code and cloud-native best practices.
• Collaborate closely with developers and platform teams to design secure services, infrastructure, and deployment processes.
• Investigate security and infrastructure incidents, perform root cause analysis, and implement long-term remediation and automation.
• Enhance security observability through improved logging, metrics, and alerting to strengthen detection and response.
• Maintain and improve internal security tools, runbooks, and documentation to increase operational efficiency.

• 7+ years of experience in infrastructure, platform, SRE, or security engineering roles.
• Previous experience administering Kubernetes platforms (EKS and/or AKS) and container registries (ECR and/or ACR), including cluster provisioning, upgrades, networking, RBAC, policy enforcement, workload security, image management, and ongoing operations in production environments.
• Strong experience managing and securing Kubernetes clusters and containerized workloads in production environments.
• Hands-on experience with PKI platforms, certificate lifecycle management, secrets management, and encryption technologies.
• Experience operating cloud-native security solutions such as AWS KMS, Azure Key Vault, HashiCorp Vault, EJBCA, Smallstep, or Venafi.
• Strong understanding of Linux systems, networking, distributed systems, and Kubernetes security best practices.
• Experience with automation, scripting, Infrastructure-as-Code, and CI/CD pipelines for PKI and infrastructure operations.
• Familiarity with IAM and access management platforms such as Okta, Entra ID, Keycloak, or similar solutions.
• Experience with monitoring, logging, alerting, and troubleshooting distributed infrastructure and security systems.
• Strong communication and collaboration skills across engineering, operations, and security teams.
• Passion for building secure, scalable, and reliable infrastructure platforms.

• Competitive salary and 401k with employer match
• Discretionary paid time off
• Paid parental leave for all
• Medical, Dental, Vision plans
• Fitness Programs
• Emotional & Mental Wellness support
• Learning & Development programs
• And yes, we have snacks in our offices

Benefits listed herein may vary depending on the nature of your employment and the location where you work.