Remote AWS Systems & Security Engineer

AVATAR FLEET LLC; Nebraska; Remote; USD 120,000 - 170,000; Full time

Job summary

AvatarFleet is seeking a Systems & Security Engineer to own security administration and infrastructure operations in a fully remote US-based role. You will manage vulnerability remediation, patching, and SOC 2 Type II readiness while supporting production Linux systems and AWS services.

You will collaborate with the CTO and software engineers to maintain audit-ready controls, reliable deployments, and effective monitoring toward a secure, available SaaS platform.

Qualifications

• 5+ years hands-on Linux systems administration in production.
• Experience supporting SOC 2 Type II audits and control evidence collection.
• Strong AWS experience (EC2, ECS, WAF, ALB, S3, IAM).
• Patching, vulnerability management, and incident response in a SaaS environment.

Responsibilities

• Own day-to-day security administration and SOC 2 Type II control execution.
• Maintain a year-round control calendar and evidence collection for audits.
• Administer access controls, logging, and least privilege.
• Run vulnerability assessments and coordinate remediation with engineering.
• Deploy and manage AWS resources (EC2, ECS, WAF, ALB, S3, EFS) for production.
• Support CI/CD with secure deployment environments and secrets management.
• Use Terraform/Ansible/AWS CLI to automate provisioning and maintenance.
• Document runbooks, audit evidence, and security policies.

Skills

Linux systems

AWS

SOC 2

Vulnerability mgmt

CI/CD

Terraform

Ansible

Incident response

Security auditing

Tools

Docker

ECS

S3

EFS

IAM

AWS CLI

Job description

AvatarFleet is seeking a Systems & Security Engineer to own security administration and infrastructure operations in a fully remote US-based role. You will manage vulnerability remediation, patching, and SOC 2 Type II readiness while supporting production Linux systems and AWS services.

You will collaborate with the CTO and software engineers to maintain audit-ready controls, reliable deployments, and effective monitoring toward a secure, available SaaS platform.