Job description

CMT is looking for a Senior Site Reliability Engineer, SecOps to help us change the world. CMT has helped protect over 65 million drivers and prevent over 126,000 crashes worldwide. We build AI to solve some of the most difficult challenges in mobility — understanding and reducing risk, detecting crashes, and getting people life-saving help. The problems are hard. The impact is real. No matter your role, your work will matter at CMT. Responsibilities: Use independent judgment and discretion to implement security tooling and controls in AWS as defined by the Security Engineering team, including deployment, configuration, agent coverage, and ongoing tooling health Implement IAM Roles and Policies, account-level guardrails, and secrets management in AWS in line with Security Engineering standards Remediate vulnerability, cloud security posture, and compliance findings across the AWS estate, tracking work to the remediation SLAs defined by the Security Engineering team Own the security telemetry pipeline — org-wide CloudTrail, GuardDuty, Security Hub, AWS Config, VPC Flow Logs, and application/audit logs — including coverage validation, retention and immutability requirements, routing into Lacework and Datadog, and managing ingest/retention cost Implement and maintain preventive controls — SCPs/RCPs, permission boundaries, Config rules and conformance packs, IaC policy-as-code in CI, and secret scanning — including drift detection, auto-remediation, and a documented exception/waiver process with expiry Implement network and data protection controls: security group and egress baselines, VPC segmentation, KMS key lifecycle and rotation, encryption-at-rest/in-transit standards, certificate lifecycle, and public-exposure prevention (S3 Block Public Access, IAM Access Analyzer external findings). Codify everything as infrastructure-as-code using Terraform and CI/CD pipelines, enabling updates through Pull Requests with approval workflows, while also automating maintenance tasks to reduce toil Provide secure-by-default Terraform modules and self-service paved paths so product teams inherit controls; consult on design reviews and threat models; act as the translation layer between Security Engineering standards and platform/application reality, feeding back where standards are impractical. Participate in incident response for security events, contribute to blameless postmortems and systemic remediation, including participating in an on-call rotation Complete any additional tasks as they arise Qualifications: Bachelor’s degree or equivalent years of experience and/or certification in a related field 4+ years of experience working in Site Reliability Engineering or Information Technology Write and review code to automate away problems within your team’s domain Intermediate to expert experience deploying and maintaining AWS services such as EC2, ECS, EKS, SQS, Lambda, Dynamo, RDS/Aurora, S3, and IAM Intermediate to expert experience monitoring services and applications using tools such as CloudWatch Metrics, CloudWatch Logs, and Datadog, including defining and configuring alerts and SLO reports Intermediate to expert experience implementing and maintaining security controls and tooling in AWS, such as IAM, KMS, Security Hub, GuardDuty, Inspector, and Config Intermediate to expert coding skills in at least one programming language; we work primarily in Python Intermediate to expert experience using AI coding agents (Claude Code) daily for Terraform and Python development, log and finding investigation, and remediation authoring - with the judgment to verify output and keep AI-assisted changes under standard PR and approval controls Intermediate to expert experience using Infrastructure as Code platforms and CI/CD pipelines, specifically Terraform, to manage AWS infrastructure and services In-depth knowledge & experience with Linux operating systems (Amazon Linux, Ubuntu) on EC2 and Docker on ECS / EKS Experience partnering with security or engineering teams to implement and operationalize security requirements Ability to work a hybrid schedule from our Cambridge, MA office two days per week Compensation and Benefits: Fair and competitive salary based on skills and experience, and annual performance bonus Equity may be awarded in the form of Restricted Stock Units (RSUs) Medical, Dental, Vision and Life Insurance, matching 401k, short-term & long-term disability and parental leave Unlimited Paid Time Off including vacation, sick days & public holidays Flexible scheduling and work from home policy depending on role and responsibilities Base Salary Range The base salary range for this position is: $118,300 to $147,900. This range is specifically for Cambridge, MA A dditional Perks: Work on a mission with real impact: crashes prevented, injuries avoided, lives protected around the world Join an industry leader — 65 million drivers protected, powering 140+ programs across 25 countries Recognized innovator in mobility AI, earning top honors including the TIME Industry Leader in AI, a Gold Edison Award, and the Artificial Intelligence Excellence Award for AI for Social Good. CMT is also Great Place to Work Certified Be part of the team inventing the future of mobility and road safety Move fast, own outcomes, do work that matters High ownership, small teams, and direct access to leadership — no layers between your work and its impact Unlimited PTO, flexible scheduling, competitive salary, annual performance bonus, RSUs, and full benefits including medical, dental, vision, and 401k match Summer Fridays provide team members with half days to recharge Join one of our employee resource groups: Black, AAPI, LGBTQIA+, Women, Book Club, and Health & Wellness Comprehensive wellness, education, and employee assistance programs Commitment to Diversity and Inclusion: At CMT, we believe the best ideas come from a mix of backgrounds and perspectives. We are an equal-opportunity employer committed to creating a workplace and culture where everyone feels valued, respected, and empowered to bring their unique talents and perspectives. Diversity is essential to our success, and we actively seek candidates from all backgrounds to join our growing team. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status or disability state. CMT is headquartered in Cambridge, MA. To learn more, visit www.cmtelematics.com and follow us on Instagram @cmt.ai A bout Cambridge Mobile Telematics: Cambridge Mobile Telematics (CMT) is the world’s largest telematics and AI company for safer mobility. Its mission is to make the world’s roads and drivers safer. The company’s AI-driven platform, DriveWell Fusion®, proactively identifies and reduces driving risk, leading to fewer crashes and injuries. To date, CMT’s technology has helped prevent over 126,000 crashes worldwide. CMT enables partners to measure risk, detect crashes, provide life-saving assistance, and streamline claims. Headquartered in Cambridge, MA, CMT operates globally with offices in Budapest, Hungary; Chennai, India; Seattle, Washington; Tokyo, Japan; and Zagreb, Croatia. Learn more at www.cmt.ai.

Requirements

Must-haves

Use independent judgment and discretion to implement security tooling and controls in AWS as defined by the Security Engineering team, including deployment, configuration, agent coverage, and ongoing tooling health
Implement IAM Roles and Policies, account-level guardrails, and secrets management in AWS in line with Security Engineering standards
Remediate vulnerability, cloud security posture, and compliance findings across the AWS estate, tracking work to the remediation SLAs defined by the Security Engineering team
Codify everything as infrastructure-as-code using Terraform and CI/CD pipelines, enabling updates through Pull Requests with approval workflows, while also automating maintenance tasks to reduce toil
Participate in incident response for security events, contribute to blameless postmortems and systemic remediation, including participating in an on-call rotation
Complete any additional tasks as they arise
Bachelor’s degree or equivalent years of experience and/or certification in a related field
4+ years of experience working in Site Reliability Engineering or Information Technology
Write and review code to automate away problems within your team’s domain
Intermediate to expert experience deploying and maintaining AWS services such as EC2, ECS, EKS, SQS, Lambda, Dynamo, RDS/Aurora, S3, and IAM
Intermediate to expert experience monitoring services and applications using tools such as CloudWatch Metrics, CloudWatch Logs, and Datadog, including defining and configuring alerts and SLO reports
Intermediate to expert experience implementing and maintaining security controls and tooling in AWS, such as IAM, KMS, Security Hub, GuardDuty, Inspector, and Config
Intermediate to expert coding skills in at least one programming language; we work primarily in Python
Intermediate to expert experience using Infrastructure as Code platforms and CI/CD pipelines, specifically Terraform, to manage AWS infrastructure and services
In-depth knowledge & experience with Linux operating systems (Amazon Linux, Ubuntu) on EC2 and Docker on ECS / EKS
Experience partnering with security or engineering teams to implement and operationalize security requirements
Ability to work a hybrid schedule from our Cambridge, MA office two days per week
Work on a mission with real impact: crashes prevented, injuries avoided, lives protected around the world
Join an industry leader — 65 million drivers protected, powering 140+ programs across 25 countries
Be part of the team inventing the future of mobility and road safety
Move fast, own outcomes, do work that matters
High ownership, small teams, and direct access to leadership — no layers between your work and its impact
Summer Fridays provide team members with half days to recharge
Join one of our employee resource groups: Black, AAPI, LGBTQIA+, Women, Book Club, and Health & Wellness

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsrestci/cdpythondocker

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto

Paid Time Off

Parental Leave

Wellness