Security Operations Engineer at Criticalloop · LumiJobs

Responsibilities

Our battery systems and the software that runs them are deployed at customer sites such as industrial campuses, EV charging hubs, and utilities, with more underway. Each of these markets comes with its own security requirements, and we want to meet them with systems that are secure, maintainable, and simple to operate.
We're hiring a Security Operations Engineer to own security across our AWS platform, corporate IT, and a fleet of connected edge controllers at remote sites. You'll build the controls, run detection and response, and turn compliance requirements into working systems as we earn and maintain security certifications, including ISO 27001 and CMMC Level 2 as we pursue defense work. The team is small, so you'll make the calls on tooling and architecture and see them land in the field.
Own the security posture of our distributed edge fleet: hardened Linux baselines, secure provisioning and remote access, signed updates, and security telemetry.
Build and maintain secure cloud and edge infrastructure as code (Terraform, Ansible), including network segmentation, secrets management, access control, and audit logging.
Run detection and response: EDR and cloud threat detection, alert triage, and leading incident response with the engineering team.
Run vulnerability management across cloud services, software, and device firmware, including pentest scoping and remediation.
Own the technical controls and evidence behind our security certifications, and lead audits and assessments.
Work with engineers on secure design: authentication between devices, services, and users; CI/CD security; and reviews of new features.
Support customer security reviews, write standards, and help with IT security as needed.
5+ years of professional experience in infrastructure, systems, security, or software roles, including at least 2 years focused on security operations or security engineering.
Strong Linux background across cloud and remote, embedded, or on-premise environments.
Hands-on infrastructure as code and configuration management on AWS (Terraform, Ansible, or similar).

Qualification

Scripting for automationWork AuthorizationAt Critical Loop

Required

5+ years professional experience in infrastructure, systems, security, or software roles
At least 2 years focused on security operations or security engineering
Strong Linux background across cloud and remote or embedded environments
Hands-on infrastructure as code and configuration management on AWS
Experience running incident response and vulnerability management in production
Experience implementing and documenting controls for ISO 27001, SOC 2, or NIST SP 800-171
Scripting for automation; Python preferred

Preferred

CMMC Level 2 or NIST SP 800-171 experience: system security plans, POA&Ms, SPRS scoring, or CUI enclaves.
Security experience with operational technology, industrial, or energy systems.
Working knowledge of authentication and authorization protocols (OAuth, SAML, OIDC) and PKI.
Experience with CrowdStrike or similar EDR, and Vanta or a similar compliance platform.
Work Authorization: Critical Loop does not provide visa sponsorship for this role. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e H-1B, TN, STEM OPT training plans etc.).
At Critical Loop, we're committed to rewarding and supporting our team. Our benefits package includes equity ownership through stock options, giving you a stake in our success, along with comprehensive health coverage (medical, dental, and vision) through an HRA with a generous allowance. We also provide a retirement savings plan and unlimited paid time off so you can recharge and maintain work-life balance.
Critical Loop is an equal opportunity employer. We're committed to building a diverse team and creating an inclusive workplace where everyone can thrive. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic under applicable law.

Security Operations Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Criticalloop

More roles at Criticalloop