Job description

ABOUT LVT LVT lvt.com is redefining how businesses operate in the physical world, moving beyond traditional security solutions to deliver AI-driven, actionable intelligence that makes sites smarter, safer, and more secure. Since pioneering our first mobile, solar-powered units lvt.com, our commitment to scrappy, hands-on innovation has made us an established leader and one of the fastest-growing companies in intelligent site technology. We are building the next generation of solutions—from our physical units in the field to a powerful Agentic AI platform—that allows our customers to gain unprecedented visibility and control over safety, compliance, and operations. This is your chance to join a cutting-edge team lvt.com that isn't just watching the world change, but actively building the technology that is changing it. We’re a team that’s focused on growth and innovation, and we’re proud that our crew, products, and leadership are being recognized for it. - A Top-Tier Growth Company: Named one of the Financial Times’ Fastest Growing Companies 2025 and #10 on the Inc. 5000 Rocky Mountain Regional list for 2025. - Innovative Leadership: Our CEO, Ryan Porter, was named an EY Entrepreneur of the Year 2025, and our CTO, Steve Lindsey, was inducted into the Silicon Slopes CTO Hall of Fame in 2024. - Product & Software Excellence: We were named one of The Software Report’s Top 100 Software Companies of 2023 and are a winner of the Security Today Govies Award for 2025. Security engineering at LVT centers on building durable capabilities rather than performing manual operations. As an individual contributor on our security engineering team, you will own two critical domains: how we detect and respond to security events, and how exposure across our infrastructure, cloud, and endpoints is identified, prioritized, and remediated. You will build these systems as version-controlled code inside our Infrastructure and DevOps workflows, setting the technical bar and defining guardrails for LVT's internal AI ecosystem. This role reports to the Director of Security Engineering and participates in the security on-call rotation. This role is based in-office out of our Headquarters in American Fork, Utah. ROLE RESPONSIBILITIES - Lead technical security incident response, driving both immediate containment and the engineering work required to prevent recurring incident classes. - Build, maintain, and scale detections as code, aligned to a documented threat model and optimized for signal quality rather than alert volume. - Own the logging and telemetry pipelines supporting detection and investigation, ensuring consistent coverage, quality, and retention across environments. - Automate routine security operations workflows—including triage, enrichment, containment, and case management—to minimize manual overhead. - Expand LVT’s security capabilities across EDR, DLP, and AI-assisted SOC tooling through code integrations, detection logic, and policy automation rather than console administration. - Define and maintain visibility and technical guardrails for LVT's internal AI usage, including agent connectivity and AI-assisted development tools. - Own exposure management end-to-end, delivering unified coverage across infrastructure, cloud, and endpoints prioritized by exploitability and reachability over raw scanner severity. - Correlate vulnerability, cloud posture, and data loss findings into a single, prioritized backlog that partner engineering teams accept and execute against. - Deliver measurable outcomes within 12 months: threat-mapped detections managed as code, automated response workflows, a reduced exposure baseline, and automated compliance evidence generation. OUR IDEAL CANDIDATE - 5+ years of experience engineering detection, response, and exposure systems, with deep expertise in security operations, incident response, or vulnerability management. - Hands-on incident response experience leading technical investigations through containment and eradication, backed by a track record of implementing post-incident remediations. - Proven experience in detection engineering and security data pipelines, including managing detections as code and operating SIEM or logging systems at scale. - Strong software engineering skills in at least one language (such as Python or Go) alongside hands-on experience with infrastructure-as-code and CI/CD pipelines. - Demonstrated ability to synthesize conflicting vulnerability findings into a single, clear risk model that software engineering teams trust and execute. - Broad technical depth across cloud, host, and network security to distinguish actionable, exploitable threats from theoretical risks. - High self-direction with the ability to operate effectively in ambiguous environments, decide technical priorities, and defend execution roadmaps. - Strong written communication skills, capable of influencing peer engineers and raising team technical standards through clear, written technical arguments. - Preferred experience: Incident command, risk prioritization frameworks (such as EPSS or attack-path analysis), policy-as-code, compliance automation (FedRAMP, SOC 2, or ISO 27001), or enterprise AI security controls. BENEFITS We believe you do your best work when your whole life is supported. We invest in our crew’s health, families, and financial futures with a benefits package designed to support you inside and outside the office. Full-time benefits include, but not limited to: Comprehensive health, dental and vision coverage, retirement benefits (401k match up to 4%), and flexible PTO. LVT IS PROUD TO BE AN EQUAL OPPORTUNITY EMPLOYER. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status. All candidates must pass a drug screening and background check upon employment. Some roles may also require passing a federal background check and fingerprinting. Must be authorized to work in the U.S. If reasonable accommodation is needed to participate in the job application or interview process, and/or to perform essential job functions, please reach out to your recruiter.

Requirements

Must-haves

Lead technical security incident response, driving both immediate containment and the engineering work required to prevent recurring incident classes.
Build, maintain, and scale detections as code, aligned to a documented threat model and optimized for signal quality rather than alert volume.
Own the logging and telemetry pipelines supporting detection and investigation, ensuring consistent coverage, quality, and retention across environments.
Automate routine security operations workflows—including triage, enrichment, containment, and case management—to minimize manual overhead.
Expand LVT’s security capabilities across EDR, DLP, and AI-assisted SOC tooling through code integrations, detection logic, and policy automation rather than console administration.
Define and maintain visibility and technical guardrails for LVT's internal AI usage, including agent connectivity and AI-assisted development tools.
Own exposure management end-to-end, delivering unified coverage across infrastructure, cloud, and endpoints prioritized by exploitability and reachability over raw scanner severity.
Correlate vulnerability, cloud posture, and data loss findings into a single, prioritized backlog that partner engineering teams accept and execute against.
Deliver measurable outcomes within 12 months: threat-mapped detections managed as code, automated response workflows, a reduced exposure baseline, and automated compliance evidence generation.
5+ years of experience engineering detection, response, and exposure systems, with deep expertise in security operations, incident response, or vulnerability management.
Hands-on incident response experience leading technical investigations through containment and eradication, backed by a track record of implementing post-incident remediations.
Proven experience in detection engineering and security data pipelines, including managing detections as code and operating SIEM or logging systems at scale.
Strong software engineering skills in at least one language (such as Python or Go) alongside hands-on experience with infrastructure-as-code and CI/CD pipelines.
Demonstrated ability to synthesize conflicting vulnerability findings into a single, clear risk model that software engineering teams trust and execute.
Broad technical depth across cloud, host, and network security to distinguish actionable, exploitable threats from theoretical risks.
High self-direction with the ability to operate effectively in ambiguous environments, decide technical priorities, and defend execution roadmaps.
Strong written communication skills, capable of influencing peer engineers and raising team technical standards through clear, written technical arguments.

Nice-to-haves

Preferred experience: Incident command, risk prioritization frameworks (such as EPSS or attack-path analysis), policy-as-code, compliance automation (FedRAMP, SOC 2, or ISO 27001), or enterprise AI security controls.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipythongoci/cd

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto