Senior Security Engineer (Defender of the Realm)

About the role

RTA is looking for a Senior Security Engineer to protect the security of its Fleet360 platform, a multi-tenant SaaS on AWS serving hundreds of fleets including cities, transit agencies and public safety organizations. The role reports to the Director, Support Engineering and works alongside Cloud, Systems and Database Engineers. It is a hands-on, autonomous role focused on identifying risks, building practical solutions and strengthening the security posture, with an emphasis on using AI to improve security operations.

Key responsibilities

• Identify, prioritize and remediate security risks across AWS infrastructure, endpoints, applications and identity systems; aim to close critical vulnerabilities within 7 days and high ones within 30 days.
• Maintain SOC 2 Type II readiness and advance the GovRAMP/FedRAMP roadmap, with documented controls, gaps and audit activities.
• Run and tune CrowdStrike Falcon, AWS GuardDuty, CloudTrail and the managed SOC/MDR pipeline, and reduce false positives through tuning and automation.
• Own vulnerability management (Qualys or similar), patch Tuesday reviews and annual penetration testing, and coordinate fixes with Engineering and IT.
• Integrate Snyk or similar scanning into GitHub Actions workflows and build practical AI-assisted triage and evidence workflows.
• Coordinate SOC 2 and GovRAMP/FedRAMP audit activities, and run incident response, containment, recovery and tabletop exercises.
• Develop security policies, procedures and playbooks, and strengthen identity and access security across Microsoft Entra ID SSO, Cloudflare Zero Trust and Auth0.
• Support customer questionnaires, RFPs and due diligence, and act as a security subject matter expert and mentor.

Required profile

• 5+ years of experience in security engineering, cloud security or a closely related field.
• Proven track record securing AWS workloads (VPC, Security Groups, IAM, GuardDuty, CloudTrail, KMS, Secrets Manager).
• Hands-on experience with EDR (CrowdStrike preferred), vulnerability management, SIEM/MDR and application security scanning.
• Working knowledge of SOC 2 Type II and NIST SP 800-53; GovRAMP or FedRAMP experience is a strong plus.
• Can write scripts in Python, PowerShell or Bash and understands Zero Trust and least-privilege principles.
• Comfortable with ambiguity, takes ownership, and uses AI tools to improve productivity.

Required skills

• AWS, CrowdStrike Falcon, GuardDuty, CloudTrail, Qualys, Snyk, GitHub Actions
• SOC 2 Type II, NIST SP 800-53, Python/PowerShell/Bash scripting
• Bonus: CISSP, CISM, CCSP, OSCP, Security+, AWS Security Specialty, CJIS, Terraform, Cloudflare Zero Trust, Microsoft Entra ID, Kubernetes RBAC

What we offer

• Salary of $160,000-$185,000 annually, depending on experience.
• Full-time, fully remote U.S. role with occasional travel to the Glendale, Arizona headquarters.
• 401(k) with 6% match, flexible PTO, Cigna PPO/HSA medical plan, health reimbursement account and wellness rewards.
• Dental, vision, EAP, life, STD, LTD, legal and identity theft protection plans.