Job description

We’re building out our platform security team and looking for an engineer to help secure our cloud environments. You’ll deploy and manage security tools across the company, work closely with our DevOps and engineering teams, and help us build automation that finds and fixes security issues instead of just reporting them. This is a hands-on role where you’ll spend most of your time building, deploying, and troubleshooting. Key Responsibilities • Secure our AWS and Azure environments, including posture management, IAM, network controls, and fixing misconfigurations • Lead security tool rollouts across the company, from proof of concept through deployment and maintenance • Own and grow our cloud security tooling, including Orca, Stacklet, and ProjectDiscovery • Build agentic workflows that detect, validate, and remediate security issues, with fixes either applied automatically or sent to the owning team as a pull request • Work with Engineering, DevOps, and IT to build secure defaults and make IaC the standard everywhere • Troubleshoot problems across cloud infrastructure, identity, pipelines, and security tools • Participate in an on-call rotation and help with incident response Basic Qualifications • 5+ years in cloud security, DevOps, DevSecOps, or similar • Strong hands-on experience with AWS and Azure, ideally from a DevOps background • Experience with Docker and Kubernetes, including securing containerized workloads • Strong Linux and scripting skills • Experience leading projects and company-wide tool deployments • Experience building automated or agentic workflows using LLMs and scripting • General IaC experience (Terraform, GHaC, Infraweave) • Strong troubleshooting ability • The ability to break down complicated topics for non-technical audiences Preferred Qualifications • Okta administration (SSO/SAML, SCIM, lifecycle automation) • Experience with Orca, Stacklet, or ProjectDiscovery • CI/CD security experience (GitHub Actions, pipeline and supply chain security) • Experience in regulated environments (NIST 800-171, CMMC, FedRAMP) • A background in DevOps, systems administration, or IT support About Jeppesen ForeFlight: Jeppesen ForeFlight is a leading provider of innovative aviation software solutions, serving the Commercial, Business, Military, and General Aviation sectors globally. Combining Jeppesen’s 90-year legacy of accurate aeronautical data with ForeFlight’s expertise in cutting-edge aviation technology, the company delivers an integrated suite of tools designed to enhance safety, improve operational efficiency, and sharpen decision-making. Why You Should Join Us: At Jeppesen ForeFlight, we know you want a rewarding career. To do that, you need challenging projects, a good work environment, and awesome coworkers. We believe in our employees, and we empower them to make a direct impact on our products and services messaging. We strive to provide our team and their loved ones with a world-class benefits experience, focused on supporting their physical, financial, and emotional wellbeing. Our benefits package includes but not limited to the following: • Medical, dental, vision insurance with Employer paid health premiums • Open PTO Policy • 401(k) with up to 10% company matching and immediate vesting • 12 Weeks Paid Parent Leave • Flight Training Rewards Pay is based upon candidate experience and qualifications, as well market and business considerations: Summary Pay Range: $102,000-$125,000 Jeppesen ForeFlight – EOE including Disability/Vets | Pay Transparency | E-Verify Participant

Requirements

Must-haves

This is a hands-on role where you’ll spend most of your time building, deploying, and troubleshooting.
Secure our AWS and Azure environments, including posture management, IAM, network controls, and fixing misconfigurations
Lead security tool rollouts across the company, from proof of concept through deployment and maintenance
Own and grow our cloud security tooling, including Orca, Stacklet, and ProjectDiscovery
Build agentic workflows that detect, validate, and remediate security issues, with fixes either applied automatically or sent to the owning team as a pull request
Work with Engineering, DevOps, and IT to build secure defaults and make IaC the standard everywhere
Troubleshoot problems across cloud infrastructure, identity, pipelines, and security tools
Participate in an on-call rotation and help with incident response
5+ years in cloud security, DevOps, DevSecOps, or similar
Strong hands-on experience with AWS and Azure, ideally from a DevOps background
Experience with Docker and Kubernetes, including securing containerized workloads
Strong Linux and scripting skills
Experience leading projects and company-wide tool deployments
Experience building automated or agentic workflows using LLMs and scripting
General IaC experience (Terraform, GHaC, Infraweave)
Strong troubleshooting ability
The ability to break down complicated topics for non-technical audiences
Open PTO Policy
12 Weeks Paid Parent Leave

Nice-to-haves

Okta administration (SSO/SAML, SCIM, lifecycle automation)
Experience with Orca, Stacklet, or ProjectDiscovery
CI/CD security experience (GitHub Actions, pipeline and supply chain security)
Experience in regulated environments (NIST 800-171, CMMC, FedRAMP)
A background in DevOps, systems administration, or IT support

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazuredockerkubernetesci/cd

Platform: ukg
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto