Senior Security & Compliance Engineer

Advanced Operations Partners; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Advanced Operations Partners is seeking a Senior Security & Compliance Engineer to lead the design, implementation, and ongoing improvement of the information security program in a SOC 2 Type II SaaS environment.

You will serve as the primary technical resource for security operations, vulnerability management, incident response, audits, and governance, partnering with infrastructure and application teams to strengthen security and meet customer and regulatory expectations.

Qualifications

• 7+ years of information security experience.
• Background in security engineering or security operations.
• Experience supporting SOC 2, ISO 27001, or similar frameworks.
• Knowledge of vulnerability management, SIEM, endpoint security, and IAM concepts.
• Strong written and verbal communication skills.

Responsibilities

• Lead security operations and monitoring with MSSPs and VARs.
• Manage vulnerability management and remediation programs.
• Support incident response, investigation, and recovery efforts.
• Administer security tools including SIEM, EDR, email security, scanners and IAM platforms.
• Develop and maintain security policies, standards and procedures.
• Coordinate audit activities and evidence collection.
• Conduct risk assessments and security reviews.
• Support customer security questionnaires and due diligence requests.
• Monitor compliance with security controls and regulatory requirements.
• Partner with infrastructure and application teams to strengthen security posture.
• Participate in change management reviews and security assessments.

Skills

Information security

Security operations

Vulnerability management

Incident response

SOC 2

ISO 27001

Tools

SIEM

EDR

Vulnerability scanners

Identity platforms

Job description

Reporting to the Sr. Manager of Infrastructure, the Senior Security & Compliance Engineer leads the design, implementation, and continuous improvement of our information security program and compliance posture. This role serves as the primary technical resource for security operations, vulnerability management, incident response, audit support, and governance activities within a SOC 2 Type II SaaS environment — bridging technical security engineering with compliance requirements to maintain a strong security posture and meet customer and regulatory expectations.

Key Responsibilities

• Manage security operations and monitoring in concert with MSSPs and VARs
• Lead vulnerability management and remediation programs
• Support incident response, investigation, and recovery efforts
• Administer security tools including SIEM, EDR, email security, vulnerability scanners, and identity platforms
• Develop and maintain security policies, standards, and procedures
• Coordinate audit activities and evidence collection
• Conduct risk assessments and security reviews
• Support customer security questionnaires and due diligence requests
• Monitor compliance with security controls and regulatory requirements
• Partner with infrastructure and application teams to strengthen security posture
• Participate in change management reviews and security assessments

Required Qualifications

• 7+ years of information security experience
• Background in security engineering or security operations
• Experience supporting SOC 2, ISO 27001, or similar compliance frameworks
• Knowledge of vulnerability management, SIEM, endpoint security, and IAM concepts
• Strong written and verbal communication skills

Preferred Qualifications

• CISSP, GSEC, Security+, or equivalent certification
• Experience in SaaS or cloud environments
• Familiarity with customer-facing security assessments and control reviews