Senior Security Engineer

Fullsteam Personnel, LLC; Georgia; Hybrid; USD 122,000 - 140,000; Full time

Job summary

Fullsteam is seeking a security professional to join our Proactive Security team in a fully remote role. You will own vulnerability management across cloud, on‑prem, and AI systems, driving risk reduction and compliance alignment with PCI‑DSS, SOC2, NIST CSF, ISO 27001.

We value ownership, rapid decision making, and collaboration with Security, IT, and BU Engineering to deliver measurable outcomes and automation across the vulnerability lifecycle.

Qualifications

• Bachelor's degree in cybersecurity or equivalent work experience.
• CISSP or equivalent certification (GIAC, CISM, CRISC) required.
• Hands-on Defensive or Offensive security training or work experience.

Responsibilities

• Contribute to and mature the vulnerability management program with SLAs.
• Identify and report vulnerabilities across infrastructure, apps, AI systems, and external surface.
• Monitor external attack surface exposures and support remediation prioritization.
• Produce vulnerability metrics, trends, and risk summaries for leadership and teams.
• Align VM program with PCI-DSS, SOC2, NIST CSF, ISO 27001 standards.
• Collaborate with Security, IT, and BU Engineering to improve risk outcomes.
• Develop AI-assisted HITL automation for Proactive Security initiatives.

Skills

Vulnerability management

Attack surface management

Security reporting

AI-driven workflows

Scripting basics

Independent remote work

Enterprise environment

Multi‑BU experience

Education

Bachelor's degree in cybersecurity

CISSP or equivalent certification

PM knowledge/certifications

Tools

Wiz

Snyk

Qualys

Nessus

MS Defender

Burp Suite

Job description

It’s fun to work in a company where people truly BELIEVE in what they’re doing! Fullsteam is a leading provider of vertical software and embedded payments technology dedicated to helping businesses flourish by providing their customers with seamless experiences.

With a dynamic and growing team of over 1,900 employees, we are committed to driving innovation and delivering best‑class software and payment solutions that empower small and medium‑size businesses across numerous industries. Our purpose is to help our customers grow their businesses and delight their customers. Join us and be a part of a forward‑thinking company that values growth, excellence, and the success of our clients.

This position is part of the Fullsteam InfoSec Team which is directly responsible for working with Business Units and Fullsteam Corporate on security initiatives and response. At Fullsteam, we’re committed to protecting our digital assets and delivering the highest standard of security across our business. As we continue to scale our security programs, we’re looking for a passionate security professional to join our Proactive Security team. We’re a small, high‑ownership team tackling vulnerability and risk exposure across a broad surface; infrastructure, applications, software, AI systems, and external attack surface. This isn’t a ticket queue role; you’ll have real ownership across the full vulnerability lifecycle, contribute to automation and tooling, and work directly alongside security leadership. If you thrive in a fast‑paced environment and want to help shape a growing VM program, we want to hear from you.

Primary Responsibilities:

• Contribute to and help mature our vulnerability management program, ensuring identified risks are remediated according to SLAs across the enterprise and business units
• Identify and report known vulnerabilities across infrastructure (cloud and on‑prem), applications, software, AI systems, and external attack surface
• Monitor external attack surface exposures and contribute to remediation prioritization
• Produce vulnerability metrics, trending reports, and risk summaries for security leadership and business unit stakeholders
• Support alignment of the VM program with industry regulations and standards (PCI‑DSS, SOC2, NIST CSF, ISO 27001)
• Collaborate with Security, IT, and BU Engineering teams to drive effective and measurable vulnerability and risk exposure outcomes
• Contribute to risk management and governance functions (e.g., risk register, key metrics, vulnerability reports)
• Develop and contribute to AI‑assisted HITL (Human in the Loop) automation and workflows for Proactive Security initiatives
• Collaborate with and learn alongside other Proactive Security team members

Skills & Competencies:

• 8+ years of Information Technology / Security experience with 2-4+ years of hands‑on experience in vulnerability management, attack surface management, or related security functions
• Working knowledge of security tools such as Wiz, Snyk, Qualys, Nessus, MS Defender, or similar platforms
• Experience with vulnerability prioritization frameworks (CVSS, EPSS, risk‑based scoring)
• Experience with application security testing concepts and tools (SAST, DAST, IAST, Burp Suite, Postman, GitHub, etc.)
• Basic scripting or programming experience in any language, or a strong desire to develop this skill
• Ability to produce clear, actionable security reporting for both technical and non‑technical audiences
• Hands‑on experience with AI‑assisted security workflows (prompt engineering, agent development, MCP tooling)
• Experience developing or contributing to process documentation
• Ability to work independently in a fully remote environment while managing multiple concurrent priorities
• Experience working in a multi‑business‑unit or enterprise environment
• Genuine curiosity and desire to grow

Minimum Qualifications:

• CISSP or equivalent certification (GIAC, CISM, CRISC)
• Bachelor’s degree in cybersecurity or equivalent work experience
• Hands‑on Defensive or Offensive security training or work experience
• Project management knowledge, training and/or certifications

Base Salary Range: $122,254 - $140,000 USD

Fullsteam supports an inclusive workplace that values diversity of thought, experience, and background. Fullsteam is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state, or local law.

Fullsteam: Leading the Evolution of Software and Payments

Fullsteam integrates modern and scalable payments technology with vertical software to create industry-specific features and end‑to‑end business management systems.

Fullsteam is a rapidly growing, dynamic, and exciting private equity‑backed software and payments company headquartered in Auburn, AL. The company was formed in 2018 by a core group of talented payments and software experts. Fullsteam is quickly expanding its operations through the acquisition of strategic portfolio companies that could benefit from our cutting‑edge software and payments platform.