IT & Cyber Security Senior Engineer

OnTrac; Washington, Northern (District of Columbia, KY); On-site; USD 156,000 - 195,000; Full time

Benefits offered by this job

Health insurance

Life & disability coverage

401(k) with match

Flexible vacation

Floating holidays

Paid sick leave

Paid holidays

Parental leave

Wellness programs

Job summary

OnTrac is seeking an IT & Cyber Security Senior Engineer to design, build, and maintain security architectures across on‑prem and cloud environments. You will enable the SOC with automation and assist the GRC team in automated evidence collection.

The role demands deep technical capabilities and leadership to mentor others and drive secure by design deployments. Remote-friendly with strong compensation and benefits.

Qualifications

• Degree in CS/Cybersecurity/IT or equivalent practical experience.
• 10+ years of progressive IT and security experience.
• At least 3 years in a senior or lead engineering role.
• Proficient in Python, PowerShell, or Bash for automation.
• Strong SIEM/EDR knowledge, YARA rules understanding.
• Ability to map controls to NIST CSF, ISO 27001 or SOC2.
• Certifications such as CISSP/CISM or GCIA/GCDA/OSCP preferred.

Responsibilities

• SOC and GRC enablement: build automation for detection and risk evidence.
• Integrate security tools to create a unified security posture.
• Support risk assessments and remediation engineering.
• Design security architectures across hybrid environments.
• Serve as Tier 3 escalation for complex incidents.
• Mentor junior engineers and analysts to raise technical excellence.

Skills

Python scripting

PowerShell

Bash scripting

SIEM

EDR

YARA rules

NIST CSF

ISO 27001

SOC2

CISSP

CISM

GCIA

GCDA

OSCP

Education

Bachelor's degree in CS/Cybersecurity/IT

Tools

EDR

SIEM

Cloud Security

Job description

Posted Wednesday, August 19, 2026 at 7:00 AM

OnTrac is hiring an IT & Cyber Security Senior Engineer !

Are you eager to join a dynamic and expanding company where you can both learn and make a meaningful impact? If you possess a strong sense of empathy, enjoy assisting others, thrive in a fast‑paced environment, and excel at problem-solving,

Founded in 1986, OnTrac has evolved into the leading provider of same‑day and next‑day delivery services in the U.S. for premier e‑commerce and product‑supply businesses, including five of the largest retailers in the U.S.

Location:

Remote – This position may be performed remotely in states where the company is authorized to employ individuals. Washington D.C., Maryland, Virginia (Preferably)

Compensation:

The expected starting base pay range for this position is $156,000. – $195,000. with full potential base salary range over a successful candidate’s tenure in the position of $156,000. – $234,000 . Actual compensation will be determined based on experience, skills, internal equity, and other job‑related factors.

This position may also be eligible for bonus, commission, or other incentive compensation in accordance with the terms of the applicable plan of up to a 20% Bonus Target.

Shift:

Monday - Friday, 8:00am - 5:00pm ( Hours subject to change based on the needs of the business )

Employment Logistics:

The IT & Cyber Security Senior Engineer is responsible for designing, building, and maintaining robust security architectures across hybrid environments (on‑prem + cloud). You will enable the SOC by improving detection and orchestration capabilities and enable GRC by translating regulatory requirements into technical controls and automated evidence collection. This is a "hands‑on‑keyboard" role that requires the ability to pivot between deep technical engineering and assisting in strategic support

Unpacking the Benefits:

Employees are eligible for a comprehensive benefits package which may include:

Medical, dental, and vision insurance

Life and short- and long‑term disability coverage

401(k) retirement savings plan with company match

Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure‑based increases up to 160 hours

Two (2) floating holidays per year

Paid sick leave*

Six (6) paid company holidays

Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave

Additional wellness and employee assistance programs

Benefits eligibility and offerings are subject to the terms and conditions of the applicable plans and company policies.

The Must-Haves:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience)
• 10+ years of progressive experience in IT and Security
• At least 3 years in a senior or lead engineering capacity
• Strong ability to code/script in Python, PowerShell, or Bash to automate repetitive security tasks and integrations
• Deep understanding of SIEM logic, YARA rules, and EDR configuration to improve detection efficacy
• Ability to interpret NIST CSF, ISO 27001, or SOC2 and implement the technical controls required to meet them
• Preferred CISSP, CISM, or hands‑on technical certifications like GIAC (GCIA, GCDA) or Offensive Security (OSCP)

Your Mission in Motion:

A summary of key responsibilities for the role is outlined below. Additional duties may be assigned as needed to support business objectives.

• SOC + GRC enablement: Design and implement technical solutions that assist the SOC in alert orchestration (SOAR) and provide the GRC team with automated risk monitoring and evidence collection capabilities.
• Security integration: Lead the integration of security tools (EDR, SIEM, Cloud Security) to ensure a unified and visible security posture.
• Risk management support: Assist in technical risk assessments by identifying vulnerabilities and recommending/implementing remediation engineering.
• Architecture & engineering: Develop and maintain security infrastructure across hybrid environments (on‑prem/cloud), applying security by design to new deployments.
• Incident response escalation: Serve as a Tier 3 escalation point for complex incidents requiring deep forensic and/or architectural expertise.
• Mentorship: Guide junior engineers and analysts, fostering technical excellence and proactive security practices.

Paving your way to your success:

• You bring the “generalist” mindset, with proficiency across network security (firewalls, Zero Trust), endpoint protection, and cloud security (AWS/GCP).
• You communicate exceptionally, explaining deep technical vulnerabilities to non‑technical risk stakeholders and translating risk/context back into technical action.
• You analyze complex issues with multiple variables and apply sound judgment in high‑impact situations.
• You define methods and procedures for new assignments, selecting and adapting advanced techniques to achieve results
• You deliver innovative and effective solutions to challenging issues.

Posting Timeline:

This job posting is anticipated to remain open for at least 15 days from the date of posting

Disclosures:

*Washington state employees are eligible for up to 56 hours of paid sick leave annually.

The salary range above represents the national range for this position. The salary range may be inclusive of several career levels at OnTrac, and the actual base salary offered may vary depending on several factors including, but not limited to: Geographic location, candidate experience and qualifications, job‑related skills and competencies, market alignment, and financial considerations.

Compensation decisions are made based on the specific circumstances of each hire to ensure fair and competitive pay.

OnTrac is proud to be an Equal Opportunity Employer

Lasership, Inc. dba OnTrac Final Mile with its affiliates, including OnTrac Logistics, Inc. (collectively, "OnTrac" or the "Company") is an equal opportunity employer. We value diversity and welcome applications from individuals of all backgrounds, abilities, and experiences. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or age. Join us in our commitment to creating a diverse and inclusive workplace.