Security Apps & Operations Engineer

RediMinds, Inc; United States; Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

Health benefits

Professional certifications support

Flexible work arrangements

Job summary

RediMinds, Inc. is seeking a motivated Security Apps & Operations Engineer to strengthen our security posture across applications and cloud infrastructure.

You will integrate security into CI/CD, tune SIEM/SOC tooling, and drive secure development practices with engineering, IT, and compliance teams. The role covers AWS/Azure/GCP, IAM controls, threat modeling, vulnerability remediation, incident response, and on‑call rotation.

Qualifications

• 2–3 years of hands-on experience in an application security, security operations, or similar role.
• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.

Responsibilities

• Integrate security tooling into CI/CD pipelines and enforce security gates.
• Conduct vulnerability assessments and coordinate remediation with development teams.
• Perform threat modeling and security code reviews for new features and major changes.
• Maintain and improve application security standards, policies, and secure coding guidelines.
• Track and report on vulnerability metrics, SLA adherence, and risk exposure.
• Monitor and enforce cloud security configurations across AWS, Azure, or GCP.
• Manage Identity and Access Management (IAM) policies across cloud environments.
• Perform cloud infrastructure security reviews and ensure CIS Benchmarks compliance.
• Respond to cloud security incidents and misconfigurations, driving root‑cause analysis.
• Operate, tune, and maintain SIEM platforms and develop detection rules.
• Triage and investigate security alerts; upscale incidents per IR playbook.
• Create dashboards and reports for stakeholders.
• Participate in on‑call rotation for security incident response.
• Support audit activities (SOC 2, ISO 27001) by providing evidence.
• Document runbooks, playbooks, and standard operating procedures.
• Stay current with the threat landscape and CVEs.
• Contribute to day‑to‑day security operations (monitoring).

Skills

DevSecOps

SIEM tuning

Cloud security

Python scripting

Vulnerability management

Cross-functional collaboration

Threat modeling

Education

Bachelor's degree in Computer Science, Information Security, or equivalent

Tools

Splunk

Microsoft Sentinel

Elastic Security

OWASP ZAP

Burp Suite

Semgrep

SonarQube

Terraform

CloudFormation

Job description

Role Summary

We are looking for a motivated Security Apps & Operations Engineer to join our security team. In this role you will be responsible for securing our applications and cloud infrastructure, operating and tuning our SIEM/SOC tooling, and embedding security practices into the software development lifecycle (DevSecOps). You will work cross-functionally with engineering, IT, and compliance teams to identify risks, respond to threats, and continuously improve our security posture.Thisis arotationalshiftrolewithoverlapwithUShours.

Key Responsibilities

Application Security & DevSecOps

• Integrate security tooling (SAST, DAST, SCA) into CI/CD pipelines and enforce security gates.

• Conduct vulnerability assessments and coordinate remediation with development teams.

• Perform threat modeling and security code reviews for new features and major changes.

• Maintain and improve application security standards, policies, and secure coding guidelines.

• Track and report on vulnerability metrics, SLA adherence, and risk exposure.

Cloud Security (AWS / Azure / GCP)

• Monitor and enforce cloud security configurations using tools such as AWS Security Hub, Azure Defender, or GCP Security Command Center.

• Manage Identity and Access Management (IAM) policies, least-privilege principles, and privilege access controls across cloud environments.

• Perform cloud infrastructure security reviews and ensure compliance with CIS Benchmarks and organizational standards.

• Respond to cloud security incidents and misconfigurations, driving root‑cause analysis and remediation.

SIEM & SOC Operations

• Operate, tune, and maintain SIEM platforms (e.g., Splunk, Microsoft Sentinel, or equivalent).

• Develop and maintain detection rules, correlation queries, and alerting logic to reduce noise and improve fidelity.

• Triage and investigate security alerts; upscale confirmed incidents following the IR playbook.

• Create dashboards and reports to surface key security metrics for stakeholders.

• Participate in on‑call rotation for security incident response.

General Operations

• Support audit activities (SOC 2, ISO 27001, or similar) by providing evidence and remediating findings.

• Document runbooks, playbooks, and standard operating procedures.

• Stay current with the threat landscape, emerging CVEs, and security tooling developments.

• Contribute today‑to‑daysecurityoperation(monitoring)

Requirements

Experience & Education

• 2 – 3 years of hands‑on experience in an application security, security operations, or similar role.

• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.

Technical Skills

• Proficiency with at least one major cloud platform (AWS, Azure, or GCP) and its native security services.

• Experience with SIEM platforms (Splunk, Sentinel, Elastic Security, or similar) — including writing queries/rules (SPL, KQL, etc.).

• Familiarity with DevSecOps tooling: SAST (e.g., Semgrep, SonarQube), DAST (e.g., OWASP ZAP, Burp Suite), SCA (e.g., Snyk, Dependabot).

• Understanding of OWASP Top 10, CVE scoring, and vulnerability management workflows.

• Scripting ability in Python, Bash, or PowerShell for automation and tooling.

• Working knowledge of networking concepts (TCP/IP, DNS, TLS, firewalls, proxies).

Soft Skills

• Clear written and verbal communication — able to explain technical risk to non‑technical stakeholders.

• Detail‑oriented with strong analytical and problem‑solving skills.

• Collaborative team player who thrives in a fast‑paced, cross‑functional environment.

Preferred Qualifications

• Industry certifications such as CompTIA Security+, AWS Security Specialty, GCIA, GCSA, CEH, or equivalent.

• Experience with container security (Docker, Kubernetes) and infrastructure‑as‑code security scanning (Terraform, CloudFormation).

• Familiarity with compliance frameworks: SOC 2, ISO 27001, NIST CSF, or PCI‑DSS.

• Prior exposure to incident response or digital forensics workflows.

• Experience with ticketing and ITSM platforms (Jira, ServiceNow).

What We Offer

• Competitive salary and performance‑based bonus.

• Comprehensive health, dental, and vision benefits.

• Support for professional certifications and continuous learning.

• Flexible work arrangements.

• Collaborative, security‑first culture where your work has real impact.