Security Engineer

Role Overview

Voltus is hiring a Security Engineer to strengthen its Security Team and secure its platform and tools. The role is split between ~60% technical security engineering and ~40% governance, risk, and compliance (GRC), with ownership of security gaps, monitoring strategy, and audit readiness.

Responsibilities

Engineering and Operations

• Build detection and security signal pipelines in Datadog
• Act as a subject matter expert for AWS Cloud and on-prem infrastructure security
• Define and implement AWS and on-prem security monitoring/best practices strategy
• Lead security incidents: investigation and remediation
• Improve Terraform modules and Infrastructure as Code (IaC) to meet security best practices
• Develop and implement a vulnerability monitoring strategy, integrated into CI/CD
• Build security automation using Python, scripting, and APIs
• Partner with Infrastructure on AWS security engineering (e.g., IAM, KMS, network segmentation)

Governance, Risk, and Compliance (GRC)

• Run SOC 2 Type 2 evidence collection and audit response
• Drive ISO 27001 implementation (risk assessments and control mapping)
• Ensure infrastructure compliance with regulatory requirements
• Conduct vendor and subprocessor risk reviews
• Respond to customer security questionnaires and external inquiries
• Mentor others to improve the team’s security posture

Requirements

• 4–7 years of security engineering experience (preferably SaaS or remote-first)
• Software development experience with Go or Python
• Proven AWS security experience: IAM, KMS, VPC, CloudTrail, GuardDuty
• Direct experience supporting a SOC 2 Type 2 audit cycle
• Familiarity with compliance requirements such as ISO 27001, HIPAA, and GDPR
• Experience with Terraform and Docker
• Proficiency with observability/monitoring tools such as Datadog (or Prometheus)
• Strong risk judgment: knowing when to make fast vs slow decisions

Nice-to-Haves

• Security certifications such as CISSP, AWS Security Specialty, or GIAC
• Include a GitHub link in the application

Notes

• No visa sponsorship or transfers for new hires
• Must be authorized to work from home location in the US or Canada; remote travel requires approval