{"id":3044486,"url":"https://alion.io/job/bright-machines-security-engineer-2","title":"Security Engineer","company":{"id":47998,"name":"Bright Machines","domain":"brightmachines.com","url":"https://alion.io/company/bright-machines","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":95,"open_postings":12,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":92,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":170000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Checkmarx","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-21T20:19:39Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-23T16:12:59Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"ABOUT THE ROLE\nAs part of the IT organization, you will execute and enforce Bright Machines' day-to-day information security program-spanning platform security, application security, and information security compliance-across our corporate, product, and manufacturing environments. The Global IT Director, to whom this role reports, sets security policy and strategy; you'll partner with the Director on that strategy while owning hands-on execution, and you'll work closely with our Infrastructure Engineer, who owns network security execution, and with Platform Engineering, our closest partner on application security. You will own day-to-day maintenance of our existing ISO 27001:2022 certification and execution of the customer security requirements our commercial relationships depend on. Because you'll work daily with IT, Platform Engineering, Software Development, and Delivery, strong written and verbal English communication is essential.\nWHAT YOU WILL BE DOING\nExecute day-to-day information security operations across corporate IT, platform, and product environments, in partnership with the Global IT Director, who sets security policy and strategy.\n\nMaintain our existing ISO 27001:2022 certification: manage evidence collection, internal audits, and corrective actions, and support annual surveillance and recertification audits.\n\nExecute customer security due diligence, completing security questionnaires (SIG, CAIQ), supporting customer audits, and tracking contractual security requirements, partnering with Legal and Sales as needed.\n\nPartner with Platform Engineering to build application security into the SDLC: threat modeling support, secure code review guidance, and operation of SAST/DAST/SCA tooling.\n\nRun vulnerability management across applications and platform infrastructure: scanning, triage, and driving remediation with engineering teams to SLA.\n\nCoordinate third-party penetration tests and security assessments; track findings to closure.\n\nPartner with the Infrastructure Engineer on the security posture of network and compute infrastructure, including our EDR/managed SOC and network IDS/IPS controls, keeping application and platform controls aligned with network security architecture.\n\nSupport security incident response: help maintain the IR plan, participate in investigations, and run periodic tabletop exercises.\n\nSupport identity and access governance for corporate and platform systems (access reviews, certifications, MFA/SSO enforcement) with IT Engineering.\n\nConduct security risk assessments for new vendors, tools, and third-party integrations.\n\nMaintain information security policies, standards, and employee security awareness training (including phishing simulations), in line with direction from the Global IT Director.\n\nTrack and report on security posture, risk, and compliance status to the Global IT Director.\n\nHelp evaluate and prepare for future compliance initiatives (e.g., SOC 2 Type II) as prioritized by leadership.\n\nWHAT WE WANT TO SEE\n5+ years of experience in security engineering, IT security, application security, or a closely related role.\n\nExperience maintaining an existing ISO 27001 ISMS: evidence collection, internal audits, and support for surveillance/recertification audits. (Building an ISMS from scratch isn't required; we already hold certification.)\n\nWorking knowledge of application security fundamentals (OWASP Top 10, secure SDLC practices) with hands-on experience using SAST/DAST/SCA tooling (e.g., Snyk, Semgrep, Checkmarx, Burp Suite).\n\nProficiency in a scripting language (e.g., Python) for security automation, with a strong inclination toward infrastructure-as-code (e.g., Terraform, Ansible) for codifying and enforcing security controls.\n\nFamiliarity with GRC platforms for compliance evidence and monitoring.\n\nBasic cloud security literacy (AWS, Azure, and/or GCP): IAM, network security groups, encryption, logging and monitoring.\n\nComfortable completing customer security questionnaires and supporting customer-facing security conversations under direction.\n\nFamiliarity with EDR/managed SOC platforms and comfort participating in security operations and detection/response workflows.\n\nExcellent written and verbal English communication skills, with the ability to communicate clearly with IT, Platform Engineering, Software Development, and Delivery stakeholders.\n\nComfortable as an execution-focused security practitioner in a lean IT organization, partnering closely with the Global IT Director, Infrastructure Engineer, Platform Engineering, and staff IT Engineers rather than working in isolation.\n\nIT WOULD BE GREAT IF YOU HAD\nSecurity certifications such as Security+, GSEC, or CCSP.\n\nExperience in manufacturing, industrial, IoT, or OT/ICS security environments.\n\nExposure to penetration testing engagements, hands-on or coordinating with external testers.\n\nFamiliarity with Zero Trust architecture principles.\n\nEnglish language proficiency.","description_format":"text","description_chars":4951,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Industrial Automation","Computer Vision","Industrial Robotics"],"lifecycle":[{"event":"open","at":"2026-10-21T23:54:43Z"},{"event":"close","at":"2026-10-22T21:33:52Z"},{"event":"reopen","at":"2026-10-23T01:57:37Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":92,"reasons":["conf:3","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/bright-machines-security-engineer-2","json_url":"https://alion.io/job/bright-machines-security-engineer-2.json","meta":{"generated_at":"2026-10-23T17:43:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26909,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47998},"rest":"https://alion.io/mcp/rest/get_company?id=47998"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbright-machines-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbright-machines-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbright-machines-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bright-machines-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbright-machines-security-engineer-2"}]}