Security Operations Engineer: Build Secure, Automated IT

Umbra; Virginia (MN); On-site; USD 145,000 - 175,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401k with company contribution

Stock Options

Free Parking

Free Lunch daily in office

Flexible Time Off

Job summary

Umbra is seeking a Security Operations Engineer to design, implement, and operate security controls across its corporate platforms, serving as a bridge between InfoSec and IT execution. This on-site role focuses on secure-by-default infrastructure within Core Infrastructure, including identity, access, email security, data protection, and endpoint posture.

The role collaborates with InfoSec and IT to drive vulnerability management, DLP, IAM, and cloud/network security, while ensuring audit

Qualifications

• 5+ years in security engineering, security operations, or infrastructure security roles.
• Hands-on experience managing the vulnerability lifecycle, including authenticated scanning, finding validation, risk-based prioritization, remediation coordination, and verification of closure.
• Strong hands-on experience designing and deploying:
• Email authentication: SPF, DKIM, and DMARC
• Enterprise DLP controls
• Strong hands-on experience implementing security controls across:
• Identity & Access Management
• Endpoint management (Windows/macOS)
• Network and cloud platforms
• Demonstrated ability to translate security policy into enforceable technical implementation.
• Experience coordinating patches, upgrades, and configuration changes across technical teams while balancing security risk, operational availability, and change-management requirements.
• Experience supporting & automating audit and compliance evidence collection.
• Strong troubleshooting and incident response skills.

Responsibilities

• Design, implement, and operate technical security controls across identity, endpoint, network, cloud, email, and SaaS environments, translating InfoSec policies and standards into enforceable configurations and platform guardrails.
• Own the technical vulnerability management lifecycle across corporate IT platforms, including scanning, risk-based prioritization, remediation coordination, validation, exception tracking, and reporting.
• Administer vulnerability scanning tools and partner with infrastructure and application owners to drive remediation of vulnerabilities, configuration issues, and critical or actively exploited exposures.
• Design and maintain email security controls, including SPF, DKIM, DMARC, secure mail routing, monitoring, and protection against phishing, spoofing, and domain abuse.
• Design, implement, and tune DLP controls across email, endpoints, cloud storage, messaging, and SaaS platforms, including controls supporting CUI and other regulated data.
• Secure and operate IAM capabilities including SSO, MFA, SCIM/JIT, PAM, least-privilege access, and access-review remediation.
• Partner with IT teams to implement and maintain security baselines across Windows and macOS environments, including encryption, patching, device trust, and endpoint security tooling.
• Implement and maintain security controls across network and cloud environments, including segmentation, firewalls, ZTNA/VPN, logging, and cloud security guardrails.
• Operate and tune security monitoring and detection capabilities, integrating signals across identity, endpoint, email, and DLP platforms and supporting investigation and remediation of security incidents.
• Maintain technical documentation, configuration artifacts, and evidence supporting NIST, CMMC, FedRAMP, and other applicable security and compliance requirements.
• Automate security controls, vulnerability management, evidence collection, and compliance workflows to improve reliability and reduce manual effort.
• Partner closely with InfoSec, Core Infrastructure, Digital Workplace, Enterprise Applications, Legal, and other stakeholders to implement security requirements and remediate technical risks.
• Participate in security-related change reviews, CABs, and other governance forums as needed.
• Perform other duties as assigned.

Skills

Security engineering

Vulnerability management

Identity & Access Management

Endpoint security

Network & cloud security

Email security

Data Loss Prevention

Automation

Audits & compliance

Incident response

Python/Bash/PowerShell

Tools

Tenable/Nessus

BigFix

Okta

FortiGate

Cisco

Python

PowerShell

Bash

Job description

Umbra is seeking a Security Operations Engineer to design, implement, and operate security controls across its corporate platforms, serving as a bridge between InfoSec and IT execution. This on-site role focuses on secure-by-default infrastructure within Core Infrastructure, including identity, access, email security, data protection, and endpoint posture.

The role collaborates with InfoSec and IT to drive vulnerability management, DLP, IAM, and cloud/network security, while ensuring audit