Senior Security Engineer - AWS & SOC2 Ownership (Remote)

CivilGrid; Boston (MA); Hybrid; USD 137,000 - 193,000; Full time

Benefits offered by this job

Company-funded health insurance (med,1

FSA

Unlimited PTO

401(k) plan

Remote-friendly / hybrid work

Job summary

CivilGrid is seeking a Senior Security Engineer to own our security program and strengthen the AWS-based infrastructure as we scale. The role blends security and reliability across DevOps, SRE, and engineering, with autonomy from day one.

The position is hybrid with in-person work at our Boston, MA office at least three days a week. You’ll lead SOC 2 readiness, orchestration with vendors, and security reviews while shaping our Trust Center and customer engagements.

Qualifications

• 5–8 years in product security, platform security, or security engineering with hands-on AWS production infra.
• Experience running SOC 2 programs including audits and evidence collection.
• Deep knowledge of AWS services (VPC, ECS, RDS, IAM, Secrets Manager) and security best practices.
• Experience with infrastructure-as-code tools (Terraform, CDK) to manage security-relevant infrastructure.
• Proven ability to lead security initiatives across engineering, IT, and leadership.

Responsibilities

• Embed reliability and security into SDLC and infrastructure decisions.
• Run the security program: SOC 2 readiness, audits, vendor reviews, access controls, endpoint security, threat modeling.
• Define and enforce policies for identity, secrets, data handling, and production access.
• Lead incident response for security events and select reliability incidents, from detection to resolution.
• Harden and monitor GIS servers (Windows Server) and the AWS platform.
• Build and maintain the Trust Center and lead security reviews with customers.
• Contribute to the AWS environment end-to-end: VPC, ECS, RDS, IAM, secrets management, cost optimization.
• Improve reliability practices: SLOs, observability, alerting, on-call rotation, runbooks, blameless post-incident reviews.
• AWS ECS, Postgres on RDS managed with CDK.

Skills

SOC 2 ownership

AWS security

Cross-functional leadership

Infrastructure as code

Incident response

SRE practices

Tools

Datadog

Drata

GitHub

Terraform

CDK

Job description

CivilGrid is seeking a Senior Security Engineer to own our security program and strengthen the AWS-based infrastructure as we scale. The role blends security and reliability across DevOps, SRE, and engineering, with autonomy from day one.

The position is hybrid with in-person work at our Boston, MA office at least three days a week. You’ll lead SOC 2 readiness, orchestration with vendors, and security reviews while shaping our Trust Center and customer engagements.