Security & Compliance Engineer

Nomagic; Atlanta (GA); Hybrid; USD 36,000 - 53,000; Full time

Benefits offered by this job

Equity for every employee

Relocation package

Hybrid work from Warsaw

English-speaking environment

No late evening calls

Job summary

Nomagic is seeking a Security & Compliance Engineer to own security and compliance across the company, from corporate to edge deployments. The role involves governing ISO 27001 and SOC 2 posture, policy creation for AI tooling, and collaborating with a cross-functional team across cloud, edge, and on-prem infrastructure.

You will work with a DevOps/Infrastructure team, security consultants, and an experienced management team that values security as an operational reality, not a checkbox.

Qualifications

• 5+ years of hands-on information security experience.
• Experience with endpoint security, SSO, SAML, and access control models.
• Strong understanding of network security architecture and secure remote access.
• Hands-on with a GRC framework (ISO27001/SOC 2), including third-party risk assessments.
• Able to write and review security policies.
• Scripting ability for automation (Python/Bash/PowerShell).
• Fluent English communication.

Responsibilities

• Own ISO 27001 and SOC 2 posture day-to-day, including evidence, controls, audits, and gaps.
• Co-create policy for AI tooling usage while ensuring security best practices.
• Define security standards for endpoints, identity, and network; verify outsourced IT compliance.
• Run third-party risk processes and handle security questionnaires.
• Monitor and respond to security events; SIEM triage and detection improvements.
• Collaborate with DevOps/Infra on cloud, edge, and OT security topics.

Skills

5+ years exp

Endpoint & Identity security

Network security

GRC framework

Security policies

Scripting

English fluency

Tools

Wazuh

Vanta

Drata

Tugboat Logic

Job description

• Are you the kind of person who is comfortable getting hands-on with technical work - reviewing a firewall ruleset, hardening an endpoint fleet, triaging a SIEM alert - and equally at ease with documenting evidence needed to pass a compliance audit?
• Do you want the kind of role where security is yours to shape, not just operating?
• Would you like to cooperate with top professionals in our industry?

If your answers are mostly yes, then you should keep reading. At Nomagic, we're on a mission to teach robots the real world. We're now looking for a Security & Compliance Engineer to own security and compliance across the company - from our corporate environment to the edge stations we deploy at customer sites.

Offer essentials:

• Own security and compliance hands-on at a scaling robotics company
• Work across cloud, edge, and on-prem infrastructure
• Equity for every employee
• Relocation package
• No late evening calls - the entire eng team is based in Europe :)
• English-speaking environment
• Hybrid work from Warsaw - you'll be in the office regularly, as the role benefits from presence

Here is why we love this job ourselves, and hope you will enjoy it too:

• We get to be creative
• We're still pretty small, so everyone has a direct impact on the final result
• Nothing is written in stone, we can easily change the tools and processes we use (if the requirements change)
• We take security and compliance seriously as operational reality, not as a checkbox
• You won't be alone - you'll have a strong DevOps/Infrastructure team for cloud and edge topics, outsourced IT support for day-to-day administration, and security consultants for specialized work
• The CEO and part of the management are experienced infrastructure engineers who created the foundations of Google Cloud Platform
• We combine world-class research with top-notch engineering and apply it to solve real problems

Some of problems you may try to solve with us :

• Owning our ISO 27001 and SOC 2 compliance posture day-to-day on Vanta - evidence, controls, audits, and closing gaps as we grow
• Co-create policy for AI tooling usage - be at the forefront of how AI can boost productivity at Nomagic, while applying best security practices around evaluation, access, and data handling
• Defining the security standards for our endpoints, identity, and network - and verifying that our outsourced IT provider implements them correctly
• Running the third-party risk process - assessing vendor security posture and handling customer security questionnaires
• Monitoring and responding to security events - SIEM, alert triage, investigation, and improving detection over time
• Working with the DevOps/Infrastructure team on security topics that span cloud, edge, and OT environments

Skills we'd like you to have:

• 5+ years of hands-on experience in information security, IT security, or a similar role
• Practical understanding of endpoint and identity security - MDM, SSO, SAML, access control models
• Solid understanding of network security architecture - segmentation, trust boundaries, and secure remote access
• Hands-on experience with a GRC framework (ISO 27001, SOC 2, or similar), including third-party risk assessment and security questionnaires
• Comfortable writing and reviewing security policies
• Scripting ability for automation - Python, Bash, PowerShell, or similar
• Fluent communication in English

Nice to have:

• Experience with Vanta or a similar GRC platform (Drata, Tugboat Logic) - matches our current stack
• Familiarity with SIEM tooling, especially Wazuh - matches our current stack
• Exposure to OT, industrial, or edge/hardware environments
• Cloud security experience (GCP preferred)
• Background in a tech scaleup

What should you expect once you apply?

• 30 minutes call with a Recruiter
• 45 minutes Hiring Manager interview
• 60 minutes Technical Interview
• Onsites - half a day of interviews & discussions at the office

Important: Feedback after completing the recruitment process.

See a short sneak peek of our product here:

https://vimeo.com/manage/videos/1051464045

https://vimeo.com/manage/videos/1051465112