Engineer - Security

Circadian; Charlotte (NC); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

IRALOGIX, Inc. is seeking a Security Engineer to safeguard AWS infrastructure, containerized apps, CI/CD pipelines, SaaS platforms, and endpoints in a collaborative security team.

The role fits a broad generalist who enjoys security, cloud environments, and growing into AppSec, DevSecOps, and compliance responsibilities. The position emphasizes hands-on work across cloud and on-premise components, with a hybrid schedule and a fast-paced fintech-oriented culture that values curiosity and

Qualifications

• 2–4 years of hands-on security, DevOps, or cloud engineering experience in modern environments.
• Familiarity with AWS IAM, containers (ECS, EKS), Terraform, SSO (Okta), and CI/CD workflows.
• Practical understanding of vulnerability management, secure coding, and cloud-native security tooling.
• Experience working in small teams or startups where everyone wears multiple hats.

Responsibilities

• Cloud Security & IAM: Support secure configuration of AWS services and develop IAM guardrails across AWS and SaaS tools.
• CI/CD Security: Define security gates for CI/CD and standardize secure build practices and secrets management.
• Vulnerability & Threat Management: Triage and remediate vulnerabilities surfaced via cloud and endpoint scanners; engage with SOC for events.
• Application Security: Help developers address legacy library vulnerabilities and integrate secure coding practices.
• Governance & Compliance: Assist in maintaining SOC 2 Type II posture and mapping controls to CSA CCM, CIS AWS; collaborate with auditors.
• Endpoint & SaaS Security: Support Mac/Windows laptop security and enforce device compliance.

Skills

AWS IAM

Containers

Terraform

CI/CD

Okta SSO

Vulnerability management

Communication

Tools

GitHub Enterprise

Trivy

Argos

Job description

Company: IRALOGIX, Inc.
Position: Security Engineer
Location: Charlette, NC or Pittsburgh, PA
Job Type: Full-Time/Exempt
Industry: Retirement Services/FinTech Software
Travel: 0%-5%

IRALOGIX is a high-growth, institutional technology platform focused on providing uniquely capable solutions to IRA providers, 401(k) recordkeepers, retirement-focused Advisors, Mutual Fund investment providers, and banks interested in growing their IRA capabilities, revenue, and market share. Through proprietary, ground-up technology, we are changing the landscape and are empowering client companies to provide broader access to the best retirement services possible while significantly lowering administration costs and increasing efficiency, profitability, and competitiveness, far beyond industry expectations.

Role Overview

We’re hiring a Security Engineer to join our lean and highly collaborative security function. Reporting to the Director of Security, you’ll play a central role in identifying risks and driving security outcomes across AWS infrastructure, containerized applications, CI/CD pipelines, SaaS platforms, and endpoints.

This role is ideal for a broad generalist with 2–4 years of experience—someone who is passionate about security, thrives in modern cloud environments, and wants to grow into a versatile engineer who touches AppSec, DevSecOps, endpoint security, and compliance. We’re looking for adaptability, curiosity, and a strong grasp of fundamentals over deep specialization.

Key Responsibilities

• Cloud Security & IAM
• Support secure configuration of AWS services.
• Help develop identity and access guardrails across AWS and SaaS tools.
• Partner with DevOps to improve image lifecycle hygiene and container security.
• CI/CD Security
• Work with engineering and platform teams to define security gates for CI/CD.
• Help standardize secure build practices, secrets management, and artifact handling.
• Vulnerability & Threat Management
• Support triage and remediation of vulnerabilities surfaced via cloud and endpoint scanners.
• Engage with our SOC to respond to security events across cloud, identity, endpoint, and app layers.
• Application Security
• Help developers address legacy library vulnerabilities and integrate secure coding practices.
• Participate in threat modeling, secure SDLC planning, and code/toolchain reviews.
• Governance & Compliance
• Assist in maintaining our SOC 2 Type II posture and mapping controls to frameworks (CSA CCM, CIS AWS).
• Collaborate with auditors and internal stakeholders to evidence controls and risk mitigation.
• Endpoint & SaaS Security
• Support Mac and Windows laptop security with device configuration/compliance management tools.
• Help govern secure SaaS usage, enforce device compliance, and manage privilege escalation.
• Education & Culture
• Contribute to internal security training, awareness campaigns, and documentation.
• Champion a collaborative, secure-by-default culture across development and operations.

JOB DESCRIPTION

You Might Be a Fit If You Have...

• 2–4 years of hands-on security, DevOps, or cloud engineering experience in modern environments.
• Familiarity with AWS IAM, containers (ECS, EKS), Terraform, SSO (Okta), and CI/CD workflows.
• Practical understanding of vulnerability management, secure coding, and cloud-native security tooling.
• Experience working in small teams or startups where everyone wears multiple hats.
• Comfort collaborating with developers, auditors, and cross-functional stakeholders.
• An eagerness to learn and improve—especially around AppSec, cloud IAM, and CI/CD security.
• Strong written and verbal communication skills.

Bonus Points For…

• Familiarity with Java, Python, Go, or Rust.
• Experience securing GitHub Enterprise, Argos, Trivy, or other common DevSecOps tools.
• Prior exposure to compliance frameworks like SOC 2, CIS, or CSA CCM.
• Contributions to open source or personal security projects.

Work Setup & Culture

• Hybrid model: 3–4 days/week in our Charlotte, NC or Pittsburgh, PA office
• Flexible and team-driven environment with high autonomy
• Emphasis on learning, adaptability, and cross-functional support
• No formal on-call, but expectation to assist during major incidents

What We Value

We care far more about aptitude, curiosity, and flexibility than traditional degrees or certifications. Whether you’ve come from an enterprise, a bootcamp, or built your skills in your home lab—we want people who can grow with us, solve problems with empathy, and help secure an evolving, cloud-first fintech platform.