{"id":1549702,"url":"https://alion.io/job/buspatrol-senior-cybersecurity-engineer","title":"Sr Platform Security Engineer","company":{"id":3767,"name":"BusPatrol","domain":"buspatrol.com","url":"https://alion.io/company/buspatrol","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Datadog","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"Wiz","optional":false},{"name":"AI Agents","optional":true},{"name":"Amazon ECS","optional":true},{"name":"DLP","optional":true},{"name":"Kubernetes","optional":true},{"name":"Lacework","optional":true},{"name":"Machine Learning","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"SBOM","optional":true},{"name":"Tokenization","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-30T18:14:09Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-17T11:43:57Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Job Overview\nBusPatrol is transforming student transportation safety through AI-enabled, cloud-connected platforms and real-time operational systems. We are seeking a Sr Platform Security Engineer to make those platforms secure by default, resilient, and easier for engineering teams to operate safely.\nThis is a hands-on engineering role focused on securing the platform layer: AWS identity and access, multi-account guardrails, network security, secrets and encryption, infrastructure-as-code, CI/CD security controls, vulnerability management, and security telemetry. You will partner with DevOps, application engineering, architecture, MLOps, IT, and Cyber Security to turn security requirements into reusable controls and paved-road patterns.\nThe successful candidate will bring strong judgment, practical implementation skills, and the ability to improve security without creating unnecessary delivery friction. This role is not an application security specialist or a general SRE role; its primary mandate is platform and cloud security engineering.\nThis role will be hybrid in Austin, TX.\nKey Responsibilities\nDesign, implement, and continuously improve security controls across BusPatrol’s AWS multi-account environments.\n\nEstablish least-privilege identity patterns using AWS IAM, IAM Identity Center, Entra ID, permission sets, groups, cross-account roles, service roles, and time-bound elevated access where appropriate.\n\nBuild and maintain secure, reusable Terraform modules and AWS CDK constructs for platform services, security controls, logging, encryption, networking, and account/environment guardrails.\n\nHelp evolve AWS Organizations, Control Tower, service control policies, account boundaries, and shared-services patterns to reduce blast radius and improve governance.\n\nSecure cloud networking through practical controls for VPCs, routing, security groups, network ACLs, WAF, private connectivity, site-to-site VPNs, Direct Connect, and related network segmentation strategies.\n\nImplement and operate secrets-management and encryption patterns using AWS KMS, Secrets Manager, Parameter Store, TLS, and automated credential rotation.\n\nIntegrate security checks into GitHub Actions and other delivery workflows, including infrastructure validation, dependency and vulnerability scanning, container/image security, SBOMs, signing, and policy enforcement.\n\nDevelop policy-as-code and preventive guardrails using appropriate tools such as AWS Config, SCPs, CloudFormation Guard, OPA, Conftest, Checkov, tfsec, or equivalent technologies.\n\nPartner with engineering teams to define secure golden paths, platform templates, and documented patterns that make the safest implementation the easiest implementation.\n\nOperate and improve cloud security telemetry and findings across services such as GuardDuty, Security Hub, CloudTrail, AWS Config, CloudWatch, and Datadog.\n\nTriage, prioritize, and remediate platform security findings from CNAPP, CSPM, vulnerability-management, penetration-testing, and internal assessment tools, including Wiz or comparable platforms.\n\nSupport incident response, containment, root-cause analysis, and post-incident improvement for cloud, infrastructure, identity, and platform security events.\n\nProduce concise architecture decisions, threat-informed control designs, runbooks, evidence, and operational documentation that engineering teams can use.\n\nCollaborate with Cyber Security and GRC on SOC 2, ISO 27001, CIS, NIST, customer assurance, and audit-readiness activities without turning compliance into a manual exercise.\n\nMentor engineers through design reviews, infrastructure pull requests, office hours, and practical security enablement.\n\nContribute to secure AI-enabled engineering and platform workflows by protecting sensitive data, non-human identities, secrets, tool permissions, logging, and production change controls.\n\nQualifications\n8-10+ years of professional experience in cloud security, platform security, DevSecOps, infrastructure security, or a related engineering discipline.\n\nDeep hands-on experience securing production AWS environments, preferably across multiple accounts and environments.\n\nStrong knowledge of AWS IAM, IAM Identity Center, KMS, Secrets Manager, Parameter Store, CloudTrail, GuardDuty, Security Hub, AWS Config, Organizations, SCPs, and VPC security.\n\nDemonstrated ability to implement infrastructure security through Terraform, AWS CDK, CloudFormation, or comparable infrastructure-as-code tooling.\n\nExperience designing and enforcing least-privilege access, role-based access, group-based permissions, cross-account access, and privileged-access controls.\n\nExperience securing CI/CD pipelines, source-control workflows, build runners, artifacts, containers, and deployment processes.\n\nPractical understanding of cloud network security, including segmentation, routing, security groups, WAF, private connectivity, site-to-site VPNs, and Direct Connect concepts.\n\nExperience with vulnerability management, security findings, risk prioritization, remediation tracking, and verification of control effectiveness.\n\nWorking knowledge of policy-as-code, preventive and detective controls, security automation, and compliance evidence collection.\n\nStrong Linux, networking, scripting, Git, and troubleshooting skills.\n\nExperience responding to or supporting security incidents in production environments.\n\nAbility to communicate clearly with engineers, architects, security professionals, auditors, and technical leadership.\n\nStrong written documentation habits and a pragmatic, automation-first mindset.\n\nPreferred Qualifications\nExperience with AWS Control Tower, landing zones, account vending, shared services, or large-scale AWS governance.\n\nExperience with Wiz, Qualys, Prisma Cloud, Lacework, or comparable CNAPP/CSPM and vulnerability-management platforms.\n\nExperience with GitHub Actions, OIDC federation, artifact registries, image signing, SBOM tooling, and supply-chain security.\n\nExperience with Kubernetes or ECS security, container hardening, runtime controls, and workload identity.\n\nExperience with Zero Trust, data protection, PII tokenization or redaction, DLP, or secure production-data access patterns.\n\nExperience supporting SOC 2, ISO 27001, CIS, NIST, or similar security and compliance frameworks.\n\nFamiliarity with Backstage, internal developer platforms, golden paths, or security self-service tooling.\n\nExperience securing AI products, AI agents, model-serving infrastructure, or non-human identities.\n\nExperience with site-to-site VPNs, Direct Connect, Transit Gateway, private endpoints, and hybrid-cloud connectivity.\n\nAWS Security, AWS Solutions Architect, AWS DevOps Engineer, CISSP, CCSP, or relevant equivalent certification.\n\nCore Skills\nAWS platform and cloud security\n\nIAM, identity governance, and privileged access\n\nInfrastructure as Code security\n\nCloud networking and segmentation\n\nCI/CD and software supply-chain security\n\nSecrets management and encryption\n\nPolicy-as-code and security guardrails\n\nVulnerability and findings management\n\nSecurity automation and observability\n\nIncident response and root-cause analysis\n\nTechnical documentation and enablement\n\nCross-functional engineering leadership\n\nWhy BusPatrol?\nWho We Are\nBusPatrol is a technology company with a public safety mission. Our AI, machine learning, telematics, and cloud-connected systems help communities make the journey to and from school safer for students.\nWhat We Offer\nCompetitive salary and benefits package\n\nUnlimited PTO\n\nA purpose-driven career focused on protecting children and improving public safety\n\nThe opportunity to work with modern cloud, automation, AI, and security technologies\n\nA culture of safety, learning, teamwork, and meaningful technical impact\n\nBe Part of Something Bigger\nThis is an opportunity to build security capabilities for a mission-critical platform, work directly across cloud infrastructure and engineering, and establish durable controls that enable teams to move faster with confidence. You will join a pragmatic, collaborative culture that values safety, connection, excellence, impact, ownership, and continuous learning.\nCompensation Note\nThe US salary range for this position will be provided in the posting. Salary ranges are determined by role, level, location, and additional factors including job-related skills, experience, and relevant education or training. Compensation details in US postings reflect base salary only and do not include bonus, commission, or benefits where applicable.\nEqual Opportunity\nBusPatrol is an equal opportunity employer. EOE/AA Disability-Veteran.","description_format":"text","description_chars":8624,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Public Transport","Law Enforcement","Computer Vision","Video Surveillance"],"lifecycle":[{"event":"open","at":"2026-09-30T23:54:49Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":1,"median_offered_wage_usd":117500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":84,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.843,"p_room":1,"age_days":16,"expected_fill_days":61,"reasons":["conf:0","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/buspatrol-senior-cybersecurity-engineer","json_url":"https://alion.io/job/buspatrol-senior-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-17T11:59:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15813,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3767},"rest":"https://alion.io/mcp/rest/get_company?id=3767"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbuspatrol-senior-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbuspatrol-senior-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbuspatrol-senior-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/buspatrol-senior-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbuspatrol-senior-cybersecurity-engineer"}]}