Security & Compliance Engineer — Own Security Across Cloud

Nomagic; Atlanta (GA); Hybrid; USD 36,000 - 53,000; Full time

Benefits offered by this job

Equity for every employee

Relocation package

Hybrid work from Warsaw

English-speaking environment

No late evening calls

Job summary

Nomagic is seeking a Security & Compliance Engineer to own security and compliance across the company, from corporate to edge deployments. The role involves governing ISO 27001 and SOC 2 posture, policy creation for AI tooling, and collaborating with a cross-functional team across cloud, edge, and on-prem infrastructure.

You will work with a DevOps/Infrastructure team, security consultants, and an experienced management team that values security as an operational reality, not a checkbox.

Qualifications

• 5+ years of hands-on information security experience.
• Experience with endpoint security, SSO, SAML, and access control models.
• Strong understanding of network security architecture and secure remote access.
• Hands-on with a GRC framework (ISO27001/SOC 2), including third-party risk assessments.
• Able to write and review security policies.
• Scripting ability for automation (Python/Bash/PowerShell).
• Fluent English communication.

Responsibilities

• Own ISO 27001 and SOC 2 posture day-to-day, including evidence, controls, audits, and gaps.
• Co-create policy for AI tooling usage while ensuring security best practices.
• Define security standards for endpoints, identity, and network; verify outsourced IT compliance.
• Run third-party risk processes and handle security questionnaires.
• Monitor and respond to security events; SIEM triage and detection improvements.
• Collaborate with DevOps/Infra on cloud, edge, and OT security topics.

Skills

5+ years exp

Endpoint & Identity security

Network security

GRC framework

Security policies

Scripting

English fluency

Tools

Wazuh

Vanta

Drata

Tugboat Logic

Job description

Nomagic is seeking a Security & Compliance Engineer to own security and compliance across the company, from corporate to edge deployments. The role involves governing ISO 27001 and SOC 2 posture, policy creation for AI tooling, and collaborating with a cross-functional team across cloud, edge, and on-prem infrastructure.

You will work with a DevOps/Infrastructure team, security consultants, and an experienced management team that values security as an operational reality, not a checkbox.