Security Operations Engineer — Cloud, SOC 2/NIST

On The Spot Development; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

On The Spot Development is building a local Polish team for a US-based B2B technology company. You will join their R&D security team, owning information security operations and working with engineering to implement robust security practices.

This is a 6-month project role with potential extension. You will coordinate vulnerability management across cloud infrastructure, applications, APIs, and containers, drive remediation from Pen tests, and align security controls with SOC 2 and NIST.

Responsibilities

• Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable
• Coordinate penetration testing engagements and drive the remediation of identified findings
• Maintain security documentation, metrics, remediation records, and technical response playbooks
• Review and improve security processes and controls across the entire engineering organization
• Support cross-functional security initiatives, technical readiness efforts, and transitions involving systems, tooling, and controls
• Maintain cloud security standards and align processes with security frameworks such as SOC 2 and NIST
• Partner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction

Job description

On The Spot Development is building a local Polish team for a US-based B2B technology company. You will join their R&D security team, owning information security operations and working with engineering to implement robust security practices.

This is a 6-month project role with potential extension. You will coordinate vulnerability management across cloud infrastructure, applications, APIs, and containers, drive remediation from Pen tests, and align security controls with SOC 2 and NIST.