Security Operations Engineer – Remote & Compliance Champion

AssemblyAI, Inc.; Denver (CO); Remote; USD 180,000 - 220,000; Full time

Benefits offered by this job

Remote work

401k match

Job summary

AssemblyAI is seeking a Security Operations Engineer to join our IT & Security team. You will own day-to-day security operations, drive audits, and help mature our compliance program across SOC 2, ISO 27001, and PCI 4.0.

This high-ownership role emphasizes automation, evidence collection, and vendor risk assessments. You will build tools and scripts to reduce manual toil and work with engineers, sales, and legal on customer security needs.

Qualifications

• 3+ years of security operations, GRC, IT security, or a related role.
• 2+ years with compliance audit cycles—evidence, controls, auditors.
• One or more security certifications (CISA, Security+, AWS Security Specialty).
• Experience with recurring security operations work (reviews, tracking, alert triage).
• Strong organization and written communication for audit docs and responses.
• Proficiency in Python and ability to read code.
• Experience using AI-assisted development tools to build automations.
• Role is for US based candidates only.

Responsibilities

• Drive SOC 2, ISO 27001, PCI 4.0 audits end to end and coordinate with auditors.
• Own the compliance automation platform (Vanta) and monitor control status.
• Run vendor risk reviews and security assessments of new tools.
• Respond to customer security questionnaires and RFP sections.
• Drive vulnerability triage and remediation tracking with SLAs.
• Monitor security alerts from endpoint, cloud, identity, and apps; investigate and close.
• Support incident response, evidence collection, and post-incident action items.
• Maintain runbooks and automation to reduce manual toil.

Skills

Security operations

GRC

Audits

Python

Technical writing

AI tooling familiarity

Tools

Vanta

Job description

AssemblyAI is seeking a Security Operations Engineer to join our IT & Security team. You will own day-to-day security operations, drive audits, and help mature our compliance program across SOC 2, ISO 27001, and PCI 4.0.

This high-ownership role emphasizes automation, evidence collection, and vendor risk assessments. You will build tools and scripts to reduce manual toil and work with engineers, sales, and legal on customer security needs.