Security Engineer - AI-Driven Automation & IAM

Novig; United States; On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Meaningful equity for every employee

100% health premiums covered

Dental & vision coverage

401(k) with 4% company match

Transit stipend

Lunch stipend NYC office

Dinner stipend NYC office

Job summary

Novig, America’s #1 sports prediction market, is seeking a Security Engineer in NYC. This hands-on role focuses on building automated security pipelines, SOAR, SIEM integrations, and AI‑driven tools to reduce risk across our infrastructure.

You will own vulnerability management end-to-end, implement policy as code, harden cloud environments, and embed security into IaC (Terraform, CDK). Collaboration with infra, engineering, and compliance teams is required.

Qualifications

• Hands-on security engineering experience building scalable systems.
• Ability to implement AI agents and LLM-powered automation.
• Experience owning vulnerability management end-to-end: scanning, prioritization, remediation.

Responsibilities

• Own focused security engineering tasks and deliver them reliably.
• Build and maintain SOAR workflows and SIEM integrations.
• Develop AI agents and LLM-powered automation to handle security tasks.
• Own vulnerability management end-to-end: scanning, prioritization, remediation.
• Implement policy as code and auditable controls.
• Harden cloud environments and embed security in IaC pipelines.
• Manage IAM systems and identity lifecycle automation.
• Collaborate with infra, engineering, and compliance teams to shift security left.

Skills

Security engineering

Automation

IAM management

Vulnerability management

Cloud security

IaC security

Tools

Terraform

AWS CDK

Job description

Novig, America’s #1 sports prediction market, is seeking a Security Engineer in NYC. This hands-on role focuses on building automated security pipelines, SOAR, SIEM integrations, and AI‑driven tools to reduce risk across our infrastructure.

You will own vulnerability management end-to-end, implement policy as code, harden cloud environments, and embed security into IaC (Terraform, CDK). Collaboration with infra, engineering, and compliance teams is required.