Senior Security Engineer: Cloud, Compliance & Incident Response

Suralink Inc; Salt Lake City (UT); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-friendly policy

Medical/vision/dental insurance

Flexible PTO

Ten paid holidays

Parental leave

Professional development allowance

Community involvement

Job summary

Suralink is seeking a Senior Security Engineer to own the security posture across cloud, identities, and applications. You will bridge risk management with hands-on engineering, ensuring infrastructure, data, and services stay secure in a remote-first environment.

Lead security roadmap, drive incident response, and manage security tooling with a strong emphasis on audits (SOC 2 Type II) and compliance. Bring autonomous, proactive security leadership to a fast-growing SaaS company.

Qualifications

• 4+ years in dedicated cybersecurity roles, ideally with experience as a 'Security Team of One' or at a scaling startup (50–500 employees).
• Cloud Infrastructure: Hands-on experience with at least one major cloud provider (AWS, GCP, Azure).
• Security Tooling: Experience with modern stack tools (e.g., Wiz, Datadog, Elastic, SentinelOne).
• Code/Scripting: Ability to write scripts (Python, Bash, Go, Javascript, or similar) to automate security tasks and integrate APIs.
• Compliance: Direct experience leading or heavily contributing to a SOC 2 audit.
• Autonomy: Comfort working in a fast-paced environment with minimal supervision.

Responsibilities

• Define the roadmap: Build and maintain our annual security strategy, compliance goals, and risk management frameworks.
• Vendor & tool management: Evaluate, select, and budget for security tooling without over-engineering our stack.
• Compliance & audits: Own or prepare the company for relevant compliance frameworks (e.g., SOC 2 Type II, or GDPR).
• Incident response planning: Create, test, and maintain our Incident Response (IR) and Disaster Recovery (DR) playbooks.
• Cloud & infrastructure security: Harden our cloud environments (AWS/GCP), manage IAM policies, and configure network security.
• AppSec & CI/CD: Integrate automated security scanning (SAST/DAST) into our deployment pipelines and conduct code reviews.
• Endpoint & corporate security: Deploy and manage our MDM, MDR solutions, and identity providers.
• Monitoring & triage: Utilize,Set up log aggregation and investigate security alerts and anomalies.
• Vulnerability and patch management programs, including risk-based prioritization.

Skills

Security governance

Cloud security

Incident response

Vulnerability management

Scripting

SOC 2

IAM

Education

AWS Security Specialty

CISSP

OSCP

GIAC GCIH

Tools

Wiz

Datadog

Elastic

SentinelOne

Terraform

Kubernetes

Jamf

Kandji

Intune

Job description

Suralink is seeking a Senior Security Engineer to own the security posture across cloud, identities, and applications. You will bridge risk management with hands-on engineering, ensuring infrastructure, data, and services stay secure in a remote-first environment.

Lead security roadmap, drive incident response, and manage security tooling with a strong emphasis on audits (SOC 2 Type II) and compliance. Bring autonomous, proactive security leadership to a fast-growing SaaS company.