Engineer - Security

Iralogix; Pittsburgh (Allegheny County); Hybrid; USD 100,000 - 140,000; Full time

Job summary

IRALOGIX, Inc. is seeking a Security Engineer to join a lean security team and secure AWS, containers, CI/CD pipelines, SaaS platforms, and endpoints.

Ideal candidates are 2–4 year, generalists who enjoy cloud-native security, AppSec, DevSecOps, and compliance work across a growing fintech-like platform.

Qualifications

• 2-4 years of hands-on security, DevOps, or cloud engineering experience in modern environments.
• Familiarity with AWS IAM, containers (ECS, EKS), Terraform, SSO (Okta), and CI/CD workflows.
• Practical understanding of vulnerability management, secure coding, and cloud-native security tooling.
• Experience working in small teams or startups where everyone wears multiple hats.
• Comfort collaborating with developers, auditors, and cross-functional stakeholders.
• An eagerness to learn and improve - especially around AppSec, cloud IAM, and CI/CD security.
• Strong written and verbal communication skills.
• Familiarity with Java, Python, Go, or Rust.
• Experience securing GitHub Enterprise, Argos, Trivy, or other common DevSecOps tools.
• Prior exposure to compliance frameworks like SOC 2, CIS, or CSA CCM.
• Contributions to open source or personal security projects.

Responsibilities

• Cloud Security & IAM: Support secure configuration of AWS services.
• Help develop identity and access guardrails across AWS and SaaS tools.
• Partner with DevOps to improve image lifecycle hygiene and container security.
• Work with engineering and platform teams to define security gates for CI/CD.
• Help standardize secure build practices, secrets management, and artifact handling.
• Vulnerability & Threat Management: Support triage and remediation of vulnerabilities surfaced via cloud and endpoint scanners.
• Engage with our SOC to respond to security events across cloud, identity, endpoint, and app layers.
• Help developers address legacy library vulnerabilities and integrate secure coding practices.
• Participate in threat modeling, secure SDLC planning, and code/toolchain reviews.
• Governance & Compliance: Assist in maintaining our SOC 2 Type II posture and mapping controls to frameworks (CSA CCM, CIS AWS).
• Collaborate with auditors and internal stakeholders to evidence controls and risk mitigation.
• Support Mac and Windows laptop security with device configuration/compliance management tools.
• Help govern secure SaaS usage, enforce device compliance, and manage privilege escalation.
• Contribute to internal security training, awareness campaigns, and documentation.
• Champion a collaborative, secure-by-default culture across development and operations.

Skills

Cloud security

IAM

DevOps

CI/CD

Vulnerability management

Threat modeling

SOC 2

Compliance

Open source

Communication

Tools

AWS IAM

ECS

EKS

Terraform

Okta/Sso

CI/CD tooling

GitHub Enterprise

Trivy

Argos

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Technical Charlotte, NC, US

Company: IRALOGIX, Inc.

Position: Security Engineer

Location: Charlette, NC or Pittsburgh, PA

Job Type: Full-Time/Exempt

Industry: Retirement Services/FinTech Software

Travel: 0%-5%

IRALOGIX is a high-growth, institutional technology platform focused on providing uniquely capable solutions to IRA providers, 401(k) recordkeepers, retirement-focused Advisors, Mutual Fund investment providers, and banks interested in growing their IRA capabilities, revenue, and market share. Through proprietary, ground-up technology, we are changing the landscape and are empowering client companies to provide broader access to the best retirement services possible while significantly lowering administration costs and increasing efficiency, profitability, and competitiveness, far beyond industry expectations.

Role Overview

We're hiring a Security Engineer to join our lean and highly collaborative security function. Reporting to the Director of Security, you'll play a central role in identifying risks and driving security outcomes across AWS infrastructure, containerized applications, CI/CD pipelines, SaaS platforms, and endpoints.

This role is ideal for a broad generalist with 2-4 years of experience - someone who is passionate about security, thrives in modern cloud environments, and wants to grow into a versatile engineer who touches AppSec, DevSecOps, endpoint security, and compliance. We're looking for adaptability, curiosity, and a strong grasp of fundamentals over deep specialization.

Key Responsibilities

• Cloud Security & IAM
• Support secure configuration of AWS services.
• Help develop identity and access guardrails across AWS and SaaS tools.
• Partner with DevOps to improve image lifecycle hygiene and container security.
• Work with engineering and platform teams to define security gates for CI/CD.
• Help standardize secure build practices, secrets management, and artifact handling.
• Vulnerability & Threat Management
• Support triage and remediation of vulnerabilities surfaced via cloud and endpoint scanners.
• Engage with our SOC to respond to security events across cloud, identity, endpoint, and app layers.
• Help developers address legacy library vulnerabilities and integrate secure coding practices.
• Participate in threat modeling, secure SDLC planning, and code/toolchain reviews.
• Governance & Compliance
• Assist in maintaining our SOC 2 Type II posture and mapping controls to frameworks (CSA CCM, CIS AWS).
• Collaborate with auditors and internal stakeholders to evidence controls and risk mitigation.
• Support Mac and Windows laptop security with device configuration/compliance management tools.
• Help govern secure SaaS usage, enforce device compliance, and manage privilege escalation.
• Contribute to internal security training, awareness campaigns, and documentation.
• Champion a collaborative, secure-by-default culture across development and operations.

JOB DESCRIPTION

You Might Be a Fit If You Have...

• 2-4 years of hands-on security, DevOps, or cloud engineering experience in modern environments.
• Familiarity with AWS IAM, containers (ECS, EKS), Terraform, SSO (Okta), and CI/CD workflows.
• Practical understanding of vulnerability management, secure coding, and cloud-native security tooling.
• Experience working in small teams or startups where everyone wears multiple hats.
• Comfort collaborating with developers, auditors, and cross-functional stakeholders.
• An eagerness to learn and improve - especially around AppSec, cloud IAM, and CI/CD security.
• Strong written and verbal communication skills.
• Familiarity with Java, Python, Go, or Rust.
• Experience securing GitHub Enterprise, Argos, Trivy, or other common DevSecOps tools.
• Prior exposure to compliance frameworks like SOC 2, CIS, or CSA CCM.
• Contributions to open source or personal security projects.

Work Setup & Culture

• Hybrid model: 3-4 days/week in our Charlotte, NC or Pittsburgh, PA office
• Flexible and team-driven environment with high autonomy
• Emphasis on learning, adaptability, and cross-functional support
• No formal on-call, but expectation to assist during major incidents

What We Value

We care far more about aptitude, curiosity, and flexibility than traditional degrees or certifications. Whether you've come from an enterprise, a bootcamp, or built your skills in your home lab - we want people who can grow with us, solve problems with empathy, and help secure an evolving, cloud-first fintech platform.