Algorithm Engineer

Shokz; Bellevue (WA); Presencial; USD 90.000 - 130.000; Tempo integral

Resumo da vaga

Shokz is seeking a hands-on security professional to own day-to-day security operations across North American systems, focusing on AWS data environment management and access control. The role will evolve toward security policy leadership, collaborating with management, business teams, and external auditors.

Initial focus includes cloud infrastructure security, audit support, and implementation of controls, with growth into a leadership role overseeing security governance and policy development.

Qualificações

• 1–3 years in enterprise IT, cloud ops or information security with hands-on production support.
• Hands-on AWS experience: IAM, S3, CloudTrail, CloudWatch; networking, encryption, backup basics.
• Understanding of least privilege, RBAC, sensitive data protection, incident response.
• Familiarity with Linux/Windows admin, basic SQL, scripting and data ingestion.
• Familiarity with U.S. data security/privacy requirements and audits.
• Strong English communication and documentation, confidentiality.

Responsabilidades

• Security operations for North American systems.
• Maintain inventory of systems, cloud resources, endpoints, and software assets.
• Conduct security configuration reviews, patch management, and remediation tracking.
• Monitor unusual access patterns and security alerts; participate in incident response.
• Manage the U.S. AWS environment: data ingestion, storage, compute, services.
• Enforce least privilege, MFA, segregation of duties, access reviews.
• Support audits with evidence and audit documentation.
• Support Cloud AI agent operations in the U.S. cloud environment.

Conhecimentos

Security operations

AWS hands-on

RBAC and least privilege

Linux/Windows admin

Compliance awareness

Communication

Ferramentas

AWS IAM

AWS S3

CloudTrail

CloudWatch

Descrição da vaga

We are seeking a hands-on technical professional with a strong security mindset, practical experience in AWS cloud environments, and a high level of ownership. This role will be responsible for day-to-day security operations across North American systems, maintaining the U.S. data environment, and managing access controls to support the company’s data compliance obligations and business growth in the United States.

Initially, the role will focus on cloud infrastructure and IT operations, implementation of security controls, and audit support. As the business grows, the position will gradually evolve into a local information security leadership role, driving the development of security policies and serving as a key security point of contact for management, business teams, and external auditors.

Key Responsibilities

• Security Operations for North American Systems
• Maintain an inventory of systems, cloud resources, endpoint devices, and software assets.
• Conduct security configuration reviews, vulnerability scans, patch management, and remediation tracking.
• Monitor unusual access patterns and security alerts; participate in security incident investigation, response, and post-incident reviews.
• AWS Data Environment & Infrastructure Operations
• Maintain the U.S. AWS environment, including data ingestion, storage, compute resources, and related services, ensuring system stability and availability.
• Handle routine configuration, troubleshooting, backup and recovery, monitoring and alerting, and optimization of capacity and cloud costs as needed.
• Data Access Approval & Access Control Management
• Within the scope of delegated authority, take substantive responsibility for security reviews of system and data access requests, including approving or denying requests, configuring permissions, and conducting periodic access reviews.
• Enforce the principle of least privilege, multi-factor authentication (MFA), segregation of duties, and access management throughout employee onboarding, internal transfers, and offboarding.
• Perform additional reviews for privileged access, sensitive data access, and exceptions to standard access policies, ensuring that approval decisions and related actions are fully traceable.
• Data Compliance & Audit Support
• Work with Legal, Compliance, and external auditors to implement applicable U.S. state-level data security requirements.
• Prepare and maintain audit evidence, including asset inventories, data flows, access records, system activity logs, and remediation documentation.
• Support the implementation and verification of corrective actions arising from audits or compliance reviews.
• Cloud-Based AI Agent Operations Support
• Support the deployment, operational monitoring, and troubleshooting of AI agents within the U.S. cloud environment for data tagging, report generation, and operational assistance.
• Manage service accounts, credentials, and tool invocation permissions.
• Implement security controls and logging for data access, model service calls, and output generation.
• Corporate IT & Hardware/Software Support
• Provide essential IT support for the U.S. team, including user accounts, business software, endpoint devices, and basic network operations.
• Coordinate with vendors on device configuration, hardware repairs, and service issues to ensure business continuity.
• Security Policy Development & Cross-Functional Collaboration

Establish and maintain operational standards for access control, change management, log retention, incident response, and routine IT operations.

Report key security risks and remediation progress to management.

Provide security guidance to business teams and support security questionnaires and assessments from customers and business partners.

Qualifications

• Relevant Experience: 1-3 years of experience in enterprise IT, cloud operations, information security, or a related field, with hands-on experience independently maintaining production environments. Candidates with experience in security management, audit coordination, or security policy development may be considered for a higher-level position.
• AWS Hands-on Experience: Practical knowledge of AWS data storage, identity and access management, logging, monitoring, and basic cloud operations. Experience using services such as IAM, S3, CloudTrail, and CloudWatch to perform operational tasks is required, along with a foundational understanding of networking, encryption, backup, and recovery.
• Security Controls Implementation: Understanding of least privilege, role-based access control (RBAC), sensitive data protection, vulnerability management, and incident response. Ability to translate security requirements into practical configurations, operational processes, and auditable records.
• Systems & Data Fundamentals: Familiarity with Linux or Windows system administration, basic SQL, and scripting. Ability to support data ingestion, job scheduling, and routine troubleshooting.
• Compliance Awareness: Familiarity with U.S. data security and privacy requirements, with the ability to work with Legal and audit professionals to translate applicable requirements into operational procedures.
• Communication & Professional Integrity: Strong professional English communication and documentation skills, with the ability to work independently with U.S. business teams and external stakeholders. A strong commitment to confidentiality, sound judgment, and the consistent enforcement of access policies, with timely escalation of identified risks.

Preferred Qualifications

• An active CISSP certification. CISM, CCSP, or relevant AWS security certifications are also advantageous.
• Experience integrating, operating, or managing access controls for Salesforce, Klaviyo, business intelligence (BI) tools, or customer data platforms (CDPs).
• Experience with data compliance, security audits, data governance, or cross-border data access controls.
• Familiarity with containers, operations automation, infrastructure as code (IaC), or experience deploying and supporting AI agents.
• Previous experience as an information security lead or independently driving the development of an enterprise security program.

Initial Priorities

During the initial onboarding period, the successful candidate will be expected to:

• Assess the current state of the U.S. cloud environment, IT assets, and access permissions, and develop a documented risk register and remediation plan.
• Establish reliable processes for access request reviews and approvals, log inspections, and vulnerability remediation.
• Gradually improve operational documentation and audit evidence to establish a solid foundation for ongoing security governance.