Security Engineer: Automate & Harden Cloud Security (Remote)

novig.us; New York (NY); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Equity

401(k)

HSA

Transit allowance

Lunch stipend

Dinner stipend

Job summary

Novig is building America's #1 sports prediction market. Our NYC-based security team seeks a hands-on Security Engineer who will design and operate proactive security across cloud, CI/CD, and infrastructure, using automation pipelines and AI-powered tools.

You will own vulnerability management, IAM, policy-as-code, SIEM/SOAR integrations, and work with engineering and compliance to embed security early in the development lifecycle.

Responsibilities

• Own focused security engineering tasks and deliver them reliably
• Build and maintain SOAR workflows and SIEM integrations that automate detection, triage, and response across our infrastructure
• Develop AI agents and LLM-powered automation to handle security tasks that would otherwise require continuous manual oversight
• Own vulnerability management end-to-end: scanning, prioritization, and automated remediation pipelines
• Implement compliance and policy as code, turning security requirements into enforceable, auditable controls
• Harden cloud environments and embed security scanning into IaC pipelines (Terraform, CDK, etc.)
• Manage and improve IAM systems — access controls, privilege boundaries, and identity lifecycle automation
• Integrate and operate MDM/EDR platforms, ensuring endpoint visibility and enforcement at scale
• Partner cross-functionally with infrastructure, engineering, and compliance teams to embed security earlier in the development lifecycle

Job description

Novig is building America's #1 sports prediction market. Our NYC-based security team seeks a hands-on Security Engineer who will design and operate proactive security across cloud, CI/CD, and infrastructure, using automation pipelines and AI-powered tools.

You will own vulnerability management, IAM, policy-as-code, SIEM/SOAR integrations, and work with engineering and compliance to embed security early in the development lifecycle.