Security Engineer

Ovative Group; Minneapolis (MN); On-site; USD 110,000 - 170,000; Full time

Job summary

Ovative Group is seeking a Security Engineer to join the Information Security team. You will own daily security operations, manage threats and vulnerabilities, and help secure AI adoption across the business across cloud-native and enterprise environments.

The role emphasizes hands-on work, incident response, and collaboration with MDR partners, engineering, and IT to strengthen security controls and tooling.

Qualifications

• Two-year or four-year degree in computer science, information security, technology, or related field; or 3+ years of equivalent experience.
• 2-5 years of experience in security operations, security engineering, site reliability engineering, or a similar hands‑on role.
• Experience with vulnerability management tools and remediation workflows.
• Working knowledge of GCP and/or Azure security services and configurations.
• Familiarity with IAM, secrets management, and network security concepts in cloud environments.
• Proficiency in shell scripting and Python, TypeScript, Go, or similar programming languages.
• Hands-on experience using generative AI tools in daily work, and a strong interest in securing them.
• Experience with modern DevSecOps practices and technologies (GitHub, Jira, Confluence).
• Experience operating across cloud-native security and enterprise productivity.

Responsibilities

• Monitor security tooling and alerts across endpoints, cloud, and network environments; triage and uplift as appropriate.
• Perform log analysis and investigation to identify and scope the impact of security incidents.
• Support incident response and business continuity plans, including tabletop exercises and post-incident reviews.
• Support MDR partner relationships and act on partner recommendations.
• Participate in root cause analyses for security findings and implement permanent fixes.
• Monitor threat intelligence and turn findings into action for the team.
• Operate vulnerability scanning tools; track findings and document exceptions.
• Coordinate with engineering and IT to ensure timely patching and hardening of systems.
• Support penetration testing engagements and drive remediation to closure.
• Help build, secure and monitor AI infrastructure and related integrations.
• Review and productionize AI-assisted applications and automations.
• Perform AI vendor/tool evaluations with secure configuration and onboarding.
• Implement guardrails and monitoring for AI tools and agents, including data protection and identity.
• Provide hands-on guidance and training for teams using AI tools and frameworks.
• Administer and tune security tools (SIEM, vulnerability scanners, EDR, CSPM).
• Build automation scripts (Python, Bash) to streamline security operations.

Skills

Security operations

Incident response

Threat intel

Cloud security

Python scripting

DevSecOps

AI security

GCP/Azure

Education

CS/InfoSec degree

Tools

SIEM

EDR

CSPM

GCP IAM

Azure IAM

Job description

About Ovative Group:

Ovative Group is an independent, full-funnel media, measurement, and creative firm transforming how brands grow. We partner with leading names like American Eagle, Best Buy, Domino's, The Home Depot, Polaris, and UnitedHealth Group to build smarter media and measurement programs that drive real, profitable growth.

We don't just track performance-we redefine it. Powered by our proprietary intelligence platform, EMRge, and our holistic metric Enterprise Marketing Return (EMR), we help brands connect revenue, customer, and brand outcomes into one clear picture of success. Our approach to full-funnel strategy, buying, and measurement delivers results that matter-and it's getting noticed. Our work has been recognized by Digiday, Google, USA Today, Inc. 5000, and Search Engine Land.

About the Role:

Ovative Group is seeking a Security Engineer to join our growing Information Security team. Reporting to the Lead Security & Cloud Engineer, this role owns the day-to-day execution of security operations, threat and vulnerability management, and security tooling - and plays a hands‑on role in securing our adoption of AI across the business.

The ideal candidate is hands‑on, detail‑oriented, and comfortable operating across both cloud‑native and enterprise productivity environments (GCP, Azure, M365, AWS).

Responsibilities:

Security Operations and Incident Response

• Monitor security tooling and alerts across endpoint, cloud, and network environments; triage and uplift as appropriate
• Perform log analysis and investigation to identify and scope the impact of security incidents
• Support incident response and business continuity plan execution, including tabletop exercises and post-incident reviews
• Support managed detection and response (MDR) partner relationships and act on partner recommendations
• Participate in root cause analyses for security findings; identify contributing factors and implement permanent fixes

Threat and Vulnerability Management

• Monitor threat intelligence feeds to understand the current threat landscape and turn findings into action for the team
• Operate and monitor vulnerability scanning tools; track and remediate findings or document exceptions
• Prioritize remediation efforts based on risk scoring and asset criticality
• Coordinate with engineering and IT teams to ensure timely patching and hardening of cloud and endpoint systems
• Support penetration testing engagements: coordinate logistics, track findings, and drive remediation to closure

AI Security Engineering

• Help build, secure and monitor the infrastructure behind our AI adoption, including MCP servers, agent policy and proxy services, and connector integrations
• Review, harden, and productionize AI-assisted and internally built applications and automations before they reach production data
• Perform the technical side of AI vendor and tool evaluations in partnership with our Security Analyst, including secure configuration, integration review, and onboarding
• Implement guardrails and monitoring for AI tools and agents, including logging, data protection, and identity for non-human actors
• Stay current on AI security research and practice (OWASP GenAI Security, prompt injection, agentic risks) and recommend tooling and secure design patterns
• Provide hands‑on guidance and training for teams building and working with AI tools, agents, and frameworks

Security Tooling, Automation, and Cloud Operations

• Administer and tune security tools including SIEM, vulnerability scanners, EDR, and cloud security posture management (CSPM) platforms
• Build and maintain automation and scripts (Python, Bash, or similar) to streamline security operations and reduce manual toil
• Support day-to-day cloud operations and IAM hygiene across GCP and Azure in partnership with our cloud security and infrastructure engineers
• Document and provide evidence for the technical controls you operate in support of SOC 2 and client security audits
• Evaluate and recommend new security tools in partnership with the Head of Information Security

Skills and Qualifications :

• Two-year or four-year degree in computer science, information security, technology, or related field; or 3+ years of equivalent experience
• 2-5 years of experience in security operations, security engineering, site reliability engineering, or a similar hands‑on role - title and level will be commensurate with experience
• Experience with vulnerability management tools and remediation workflows
• Working knowledge of GCP and/or Azure security services and configurations
• Familiarity with IAM, secrets management, and network security concepts in cloud environments
• Proficiency in shell scripting and Python, TypeScript, Go, or similar programming languages
• Hands‑on experience using generative AI tools in daily work, and a strong interest in securing them
• Experience with modern DevSecOps practices and technologies (GitHub, Jira, Confluence)
• Experience operating across cloud-native security and enterprise productivity