Sr Security Engineer I

Jeppesen ForeFlight, Inc.; United States; Remote; USD 102,000 - 125,000; Full time

Benefits offered by this job

Medical insurance

Open PTO Policy

401(k) with company match

12 Weeks Paid Parent Leave

Flight Training Rewards

Job summary

Jeppesen ForeFlight, Inc. is seeking a hands‑on Cloud Security Engineer to secure our cloud environments and automate security issues. You will deploy and manage security tooling, collaborate with DevOps, and drive secure defaults across IaC and pipelines.

The role emphasizes proactive tooling, incident response, and continuous improvement in a fast‑growing aviation software environment.

Qualifications

• 5+ years in cloud security, DevOps, DevSecOps, or similar.
• Strong hands‑on experience with AWS and Azure, ideally from a DevOps background.
• Experience with Docker and Kubernetes, including securing containerized workloads.
• Strong Linux and scripting skills.
• Experience leading projects and company‑wide tool deployments.
• Experience building automated or agentic workflows using LLMs and scripting.
• General IaC experience (Terraform, GHaC, Infraweave).
• Strong troubleshooting ability.
• The ability to break down complicated topics for non‑technical audiences.

Responsibilities

• Secure our AWS and Azure environments, including posture management, IAM, network controls, and fixing misconfigurations.
• Lead security tool rollouts across the company, from proof of concept through deployment and maintenance.
• Own and grow our cloud security tooling, including Orca, Stacklet, and ProjectDiscovery.
• Build agentic workflows that detect, validate, and remediate security issues, with fixes either applied automatically or sent to the owning team as a pull request.
• Work with Engineering, DevOps, and IT to build secure defaults and make IaC the standard everywhere.
• Troubleshoot problems across cloud infrastructure, identity, pipelines, and security tools.
• Participate in an on‑call rotation and help with incident response.

Skills

Cloud security

DevOps/DevSecOps

Docker security

Kubernetes security

Linux scripting

IaC tooling

Tools

AWS

Azure

Terraform

GitHub Actions

Job description

We’re building out our platform security team and looking for an engineer to help secure our cloud environments. You’ll deploy and manage security tools across the company, work closely with our DevOps and engineering teams, and help us build automation that finds and fixes security issues instead of just reporting them.

This is a hands‑on role where you’ll spend most of your time building, deploying, and troubleshooting.

Key Responsibilities

• Secure our AWS and Azure environments, including posture management, IAM, network controls, and fixing misconfigurations
• Lead security tool rollouts across the company, from proof of concept through deployment and maintenance
• Own and grow our cloud security tooling, including Orca, Stacklet, and ProjectDiscovery
• Build agentic workflows that detect, validate, and remediate security issues, with fixes either applied automatically or sent to the owning team as a pull request
• Work with Engineering, DevOps, and IT to build secure defaults and make IaC the standard everywhere
• Troubleshoot problems across cloud infrastructure, identity, pipelines, and security tools
• Participate in an on‑call rotation and help with incident response

Basic Qualifications

• 5+ years in cloud security, DevOps, DevSecOps, or similar
• Strong hands‑on experience with AWS and Azure, ideally from a DevOps background
• Experience with Docker and Kubernetes, including securing containerized workloads
• Strong Linux and scripting skills
• Experience leading projects and company‑wide tool deployments
• Experience building automated or agentic workflows using LLMs and scripting
• General IaC experience (Terraform, GHaC, Infraweave)
• Strong troubleshooting ability
• The ability to break down complicated topics for non‑technical audiences

Preferred Qualifications

• Experience with Orca, Stacklet, or ProjectDiscovery
• CI/CD security experience (GitHub Actions, pipeline and supply chain security)
• Experience in regulated environments (NIST 800-171, CMMC, FedRAMP)
• A background in DevOps, systems administration, or IT support

About Jeppesen ForeFlight:

Jeppesen ForeFlight is a leading provider of innovative aviation software solutions, serving the Commercial, Business, Military, and General Aviation sectors globally. Combining Jeppesen’s 90‑year legacy of accurate aeronautical data with ForeFlight’s expertise in cutting‑edge aviation technology, the company delivers an integrated suite of tools designed to enhance safety, improve operational efficiency, and sharpen decision‑making.

Why You Should Join Us:

At Jeppesen ForeFlight, we know you want a rewarding career. To do that, you need challenging projects, a good work environment, and awesome coworkers. We believe in our employees, and we empower them to make a direct impact on our products and services messaging. We strive to provide our team and their loved ones with a world‑class benefits experience, focused on supporting their physical, financial, and emotional wellbeing.

• Medical, dental, vision insurance with Employer paid health premiums
• Open PTO Policy
• 401(k) with up to 10% company matching and immediate vesting
• 12 Weeks Paid Parent Leave
• Flight Training Rewards

Pay is based upon candidate experience and qualifications, as well market and business considerations: Summary Pay Range: $102,000-$125,000

Jeppesen ForeFlight – EOE including Disability/Vets | Pay Transparency | E‑Verify Participant

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.