Security Operations Engineer

Magnitude Consulting; New York (NY); On-site; USD 150,000 - 185,000; Full time

Job summary

Magnitude Consulting is seeking a Security Operations Engineer to join a high-growth technology client. This hands-on role focuses on identifying and remediating security risks across cloud and corporate environments, working with DevOps, SRE, and IT teams. It is not a traditional SOC or heads-down software role.

You will monitor cloud environments, investigate risks, and contribute to vulnerability management, with potential to lead a small Security Operations team as the function grows.

Qualifications

• Experience in cloud security, security operations or related security engineering environments.
• Experience in corporate/enterprise settings.
• Strong understanding of cloud security across AWS and/or Azure.
• Exposure to CSPM/CNAPP platforms such as Wiz or Upwind.

Responsibilities

• Monitor cloud environments for security risks, misconfigurations, exposed assets, and vulnerabilities.
• Collaborate with DevOps, SRE, and Engineering to drive remediation.
• Identify vulnerabilities and configuration issues and communicate risk to teams.
• Support security incident investigation, remediation and documentation.
• Contribute to vulnerability management and attack surface management.

Skills

Cloud security

Security operations

DevSecOps

Python

CI/CD

Terraform

Tools

Wiz

Upwind

CNAPP platforms

Job description

Compensation: $150K–$185K base + bonus + equity

We’re partnering with a high-growth technology business looking to add a Security Operations Engineer to its growing Security function.

This is a hands-on security role focused on identifying, understanding and driving remediation of security risks across cloud and corporate environments. It is not a traditional SOC position or a heads-down software engineering role.

You’ll work closely with DevOps, SRE, Application Security, Product Engineering, GRC and IT teams — identifying security issues, understanding the risk they create, and working with the relevant teams to get them resolved.

What You’ll Be Doing

• Monitor cloud environments for security risks, misconfigurations, exposed assets, excessive permissions and emerging vulnerabilities.
• Work with CSPM/CNAPP and other cloud security tooling to identify and investigate potential risks.
• Partner closely with DevOps and SRE teams around cloud infrastructure, CI/CD pipelines and infrastructure-as-code.
• Identify vulnerabilities and configuration issues and help engineering teams understand the risk and appropriate remediation.
• Support security incident investigation, remediation and documentation.
• Contribute to vulnerability management, attack surface management and broader security operations.
• Work across Security, Engineering, DevOps, GRC and IT to improve security practices.
• Help assess and improve the security tools and processes used across the organisation.
• Contribute to and maintain internal security tooling, including Python-based tools.
• As the function grows, there is potential to take on additional responsibility and potentially help build or lead a small Security Operations team.

What We’re Looking For

• Experience within cloud security, security operations, infrastructure security, DevSecOps or a related security engineering environment.
• Experience working within a corporate or enterprise environment.
• Strong understanding of cloud security across AWS and/or Azure.
• Experience identifying cloud misconfigurations, vulnerabilities, permissions issues and infrastructure security risks.
• Exposure to CSPM/CNAPP platforms such as Wiz, Upwind or similar technologies is highly desirable.
• Understanding of CI/CD, SDLC, Git, Terraform and modern DevOps workflows.
• Experience with vulnerability management and/or attack surface management.
• Security incident investigation and remediation experience.
• Coding or scripting experience, ideally Python.
• Strong communication skills and the ability to work effectively with DevOps, SRE and Engineering teams.

The Profile

We’re looking for someone who can look at a cloud or engineering environment, identify where the security risk sits, understand why it matters and communicate that effectively to the teams responsible for fixing it.

You do not need to be the engineer personally deploying every fix. The important part is having enough technical understanding to challenge, advise and work effectively with engineering teams to drive remediation.

We’re particularly interested in people who are naturally curious about security and technology and continue developing their knowledge outside of their day-to-day responsibilities.

This is a strong opportunity for someone looking to take ownership within a growing Security Operations function, with genuine longer-term leadership potential.