Security & Systems Engineer - AWS/Linux, SOC 2

AVATAR FLEET LLC; Florida; Remote; USD 120,000 - 150,000; Full time

Job summary

AvatarFleet LLC is seeking a Systems & Security Engineer to own day-to-day security administration and infrastructure operations. The role focuses on vulnerability management, patching, SOC 2 Type II compliance, and production reliability across AWS, Linux hosts, and CI/CD support.

You will collaborate with the CTO and software engineers to maintain secure, auditable, and highly available SaaS infrastructure in a fully remote setting.

Qualifications

• At least 5 years of hands-on Linux systems administration, with responsibility for security and availability in production environments; SaaS experience is preferred.
• Strong AWS administration skills, especially EC2 and Linux-hosted applications, with working experience across ECS, IAM, networking, load balancing, storage, WAF, and monitoring.
• Practical experience supporting SOC 2 Type II audits and maintaining controls throughout the audit period, including evidence collection, access reviews, and remediation tracking.
• Hands-on vulnerability management, Linux patching, security hardening, log analysis, and incident response.

Responsibilities

• Own day-to-day security administration and coordinate SOC 2 Type II control execution, evidence collection, and annual audit preparation with the CTO and other control owners.
• Maintain a year-round control calendar; track recurring reviews, evidence requirements, remediation commitments, and audit requests through completion.
• Maintain security policies and operating procedures that reflect actual practices; identify control gaps early and drive corrective action.
• Administer access controls and support access reviews, least privilege, credential management, and security logging. Keep records complete and readily available for audit.
• Run and review vulnerability assessments; prioritize findings by severity, exposure, business risk, and customer impact.
• Own routine and urgent patching of Linux hosts, application dependencies, container images, and supporting software in partnership with engineering.
• Plan maintenance, validate changes, and confirm remediation. Apply and document mitigations when an immediate patch is not practical.
• Track findings from discovery through verified resolution and maintain evidence of patching, mitigation, and approved exceptions.
• Deploy, configure, and maintain AWS resources, including EC2, ECS, WAF, ALB, S3, EFS, IAM, and networking components.
• Maintain secure configurations, appropriate capacity, reliable connectivity, and effective monitoring across production and supporting environments.
• Manage backups, replication, retention, restore testing, and secure data disposal in line with operational and compliance requirements.
• Improve performance and cost efficiency while protecting application availability.
• Administer Debian and Amazon Linux hosts, including services, packages, permissions, storage, networking, and system configuration.
• Maintain production applications on EC2 hosts and troubleshoot issues across the operating system, application runtime, containers, network, and storage.
• Support Docker, Docker Compose, and ECS workloads; keep configurations consistent and operating procedures documented.
• Maintain actionable infrastructure and security monitoring, log collection, and alerting; investigate alerts and respond to service interruptions.
• Restore service promptly, communicate impact and progress, and coordinate with engineering during production incidents.
• Investigate root causes, document incidents, and implement improvements that reduce recurrence.
• Maintain recovery procedures and operational runbooks; validate that backups and recovery processes work when needed.
• Support software engineering with CI/CD configuration, deployment environments, build and release troubleshooting, and secure pipeline access.
• Help maintain dependable deployments, configuration and secrets management, rollback procedures, and environment consistency.
• Partner with engineers to diagnose infrastructure and runtime issues affecting development, testing, and production.
• Use Terraform, Ansible, AWS CLI, and scripting to automate provisioning, configuration, patching, and recurring operational tasks.
• Keep infrastructure changes reviewable and reproducible; maintain useful system documentation, runbooks, and audit evidence.

Skills

Linux administration

AWS administration

SOC 2 audits

Terraform

Ansible

AWS CLI

Docker

Docker Compose

CI/CD

Monitoring

Tools

Docker

Docker Compose

GitHub workflows

Flask

Sentry

Jira

Redis

Python

Job description

AvatarFleet LLC is seeking a Systems & Security Engineer to own day-to-day security administration and infrastructure operations. The role focuses on vulnerability management, patching, SOC 2 Type II compliance, and production reliability across AWS, Linux hosts, and CI/CD support.

You will collaborate with the CTO and software engineers to maintain secure, auditable, and highly available SaaS infrastructure in a fully remote setting.