SecOps Engineer

Description:

About Veryon

Veryon is the leading global provider of aviation software and information services, trusted by over 5000+ customers, 75,000 maintenance professionals, and 100+ OEMs across nearly 150 countries. Our mission is to deliver smarter, predictive technology solutions, including our AI platform, Veryon AIRE that maximizes aircraft uptime and operational efficiency for the world’s most demanding aviation organizations.

At?Veryon, we are an?AI-forward company?focused on driving innovation and efficiency through emerging technologies. We prioritize hiring individuals who embrace AI, think creatively about its application, and are excited to continuously evolve alongside it.???

About the Role

We are seeking a Security Engineer I to help support the day to day operation and improvement of our security program, with a heavier focus on hands on implementation work across infrastructure, cloud, and core security tooling. This role will help close the gap between identifying security issues and getting the technical changes needed implemented.

This role will support security operations work such as alert and incident investigation, but a large part of the job will also be helping with infrastructure vulnerability remediation, cloud security configuration, administration of security tools, implementation of network and edge security controls, and general engineering support for security initiatives. This is an entry level role, but it is best suited for someone who wants real hands on technical exposure and is interested in learning how security work gets operationalized across cloud, infrastructure, compliance, and engineering.

Key Responsibilities

• Configure and administer XDR(dashboard configurations, alert tuning, agent update coordination).
• Monitor, triage, and help investigate security alerts and incidents, including phishing, endpoint, and XDR related activity
• Assist with Harmony SASE policy exclusions, visibility improvements, troubleshooting, and general support of user traffic security controls
• Help with cloud security configuration reviews, hardening efforts, and reduction of unnecessary exposure across the environment (finding exposed endpoints, possible attack paths, etc and researching a solution to fix the risk.)
• Takes initiative to find ways to automate workflows.
• Support security driven technical remediation tied to compliance and audit related initiatives, including SOC 2, ISO 27001, and ISO 42001 efforts(gathering evidence, researching and planning remediations, etc)
• Work with IT, DevOps, engineering, and other internal teams to help move security recommendations into actual implemented changes
• Document procedures, findings, technical changes, and remediation work clearly and accurately
• Verification of security findings from customers and vulnerability reports.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Internship, labs, projects, and/or up to 3 years of hands on experience in IT, software development, system administration, or network administration
• Experience with scripting or automation using Python, PowerShell, or similar languages
• Experience with basic network administration, system administration, software development or IT support.
• Exposure to basic phishing email analysis and EDR/XDR alert triage.
• Understanding of secure coding best practices such as OWASP top 10
• Understanding of Cloud security best practices
• Understanding of the incident response lifecycle
• Great communication skills

Preferred Qualifications:

• Security+, CySA+, OSCP or other related certification
• Hands on Azure or AWS administration
• Experience with infrastructure as code
• Experience with vulnerability management
• Experience delivering and seeing projects through completion

Our Core Values:

• Fueled by Customers: Customers are at the core of every decision.
• Win Together: Collaboration is our competitive edge.
• Make It Happen: No excuses. Just outcomes.
• Innovate to Elevate: We boldly challenge what’s standard and lift what’s possible.