{"id":1120298,"url":"https://alion.io/job/csc-generation-secops-engineer","title":"Senior SecOps Engineer","company":{"id":8524,"name":"CSC Generation","domain":"cscgeneration.com","url":"https://alion.io/company/csc-generation","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":86,"open_postings":111,"ghost_share":0.009,"stale_share":0.333,"repost_share":0.009,"time_to_fill_p50_days":74,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States","Toronto, Canada"],"countries":["US","CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":163000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"LLM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"CloudFormation","optional":true},{"name":"Kubernetes","optional":true},{"name":"Red Teaming","optional":true},{"name":"SIEM","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-09-22T17:44:06Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-11-09T11:45:22Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"CSC Generation is the AI-native holding company re-engineering omnichannel retail. We acquire iconic brands and transform them with Genesis, our operating platform combining a Data Fabric, Automation Engine, proprietary tools, and shared services to modernize operations, elevate customer experience, and expand margins. With $1B+ in revenue across 13 brands, our portfolio includes Sur La Table, Backcountry, One Kings Lane, and others that serve as real-world innovation labs.\nReports to: CTO/CIO\nLocation: Houston, TX (Hybrid); Toronto, ON (Hybrid)\nAbout the Role\nThe threat landscape has shifted - autonomous AI agents are probing infrastructure at machine speed, chaining misconfigurations, and adapting in real time. We need an engineer who can build AI-aware defenses across our cloud environment and codebases before we need them, not after.\nAs SecOps Engineer, you will write code, stand up pipelines, and integrate with observability stacks to turn raw signal into actionable security insight across our portfolio's AWS infrastructure. Within 6-12 months you will have production security tooling running in CI/CD, real-time threat detection correlated through ELK and Grafana, and AI-powered perimeter monitoring actively protecting our cloud footprint.\nThis is a lean team. You will own a lot, move fast, and make decisions with full end-to-end responsibility.\nWhat You'll Do\nBuild and run analysis tools that scan existing codebases for security vulnerabilities and produce clear, actionable remediation guidance for engineering teams.\nIntegrate automated security scanning into GitHub Workflows (CI/CD) so every commit and PR is continuously reviewed for new vulnerabilities.\nDesign and build threat detection tools that work alongside observability platforms (ELK, Grafana) to correlate signals and identify active security threats in real time.\nBuild or deploy AI-powered tools that monitor the cloud perimeter (AWS) for anomalous or malicious activity and drive automated or semi-automated response.\nOwn the full lifecycle of security tooling you build - from prototype to production - including monitoring for reliability and false-positive rates.\nPartner with engineering teams to help them understand and act on findings, and iterate on tooling based on their feedback.\nTranslate security findings into specific, understandable remediation steps for engineers who may not have deep security backgrounds.\nRequired Qualifications\nHands-on experience with AWS infrastructure (IAM, VPC, networking/security groups, common compute/storage services) and how they are commonly misconfigured or attacked.\nExperience working with GitHub Workflows / GitHub Actions and building CI/CD-integrated tooling.\nPractical experience using AI/LLM tools to build analysis or automation tooling (e.g., code review, log analysis, anomaly detection, or classification).\nStrong understanding of common application and infrastructure vulnerability classes (OWASP Top 10, cloud misconfigurations, supply chain risks).\nComfort working with observability/monitoring platforms such as ELK and Grafana, including building dashboards, alerts, or custom data pipelines.\nSolid software engineering skills - comfortable writing production-quality code (Python, Go, or similar) to build tools, not just configure existing ones.\nAbility to communicate security findings clearly and translate vulnerabilities into concrete remediation steps.\nPreferred Qualifications\nOffensive security experience (penetration testing, red teaming, exploit development), especially using AI/LLM-based tools to attack or stress-test infrastructure - and the ability to translate offensive findings into defensive tooling.\nExperience with SIEM/SOAR platforms and building automated response playbooks.\nRelevant certifications (OSCP, GCIH, AWS Security Specialty, or similar).\nExperience with infrastructure-as-code (Terraform, CloudFormation) from a security-review perspective.\nFamiliarity with container/Kubernetes security.\nWhy Join\nThe people who do best here are builders. They take ownership, move fast, and want to see the direct impact of their work.\nCross-Functional Impact: Your tooling will touch every engineering team across the portfolio - securing codebases, pipelines, and cloud infrastructure at scale.\nAI-First Skill Building: Build with cutting-edge AI/LLM tooling for both offensive and defensive security on a modern AWS and observability stack.\nEnd-to-End Ownership: Own the full lifecycle of security tooling from prototype through production - architecture, code, deployment, and iteration are yours.\n Competitive Benefits (US): Paid time off policies, 401(k) match, medical/dental/vision and a variety of supplemental policies, and employee discounts across our portfolio of brands.\n Competitive Benefits (Canada): Paid time off policies, RRSP match, medical, dental, and vision coverage, a variety of supplemental benefit options, and employee discounts across our portfolio of brands.\nInterview Process\nRecruiter Screen - A 30-minute conversation with our recruiting team to align on the role, your background, and what you are looking for.\nHiring Manager Interview - Deep dive into your security engineering experience, AWS infrastructure knowledge, and approach to building automated security tooling.\nTechnical / Case Discussion - A hands-on conversation covering vulnerability analysis, CI/CD security integration, and AI-driven threat detection approaches.\nIn-Person Interview - We'd like to meet you at our Houston or Toronto office. Details and logistics will be arranged with your recruiter.\nReference Checks - Conducted in parallel with the final stages where possible.\nOffer - We move quickly for the right candidate.\nInterview process is subject to change. Any updates will be communicated promptly and clearly.\nPlease Note\nPart of our interview process is a mandatory in-person interview with someone on our team prior to an offer. Candidates that are unwilling or unable to meet for an in-person interview will be removed from consideration immediately. \nDue to a high volume of fraudulent applications, you must share a valid LinkedIn profile URL in the application questions below to be considered. If you do not have a LinkedIn profile, you must provide a credible reason in that field and supply alternative evidence of your professional background to verify your identity.","description_format":"text","description_chars":6381,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["E-commerce Platforms","Retail & Shop Systems"],"lifecycle":[{"event":"open","at":"2026-09-22T18:43:59Z"},{"event":"close","at":"2026-10-21T12:35:54Z"},{"event":"reopen","at":"2026-10-21T17:16:43Z"}],"visa":[],"liveness":{"score":64,"band":"ok","label":"Likely open","p_open":1,"p_active":0.885,"p_room":0.72,"age_days":47,"expected_fill_days":74,"reasons":["conf:3","velocity","win:mid","crowd:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/csc-generation-secops-engineer","json_url":"https://alion.io/job/csc-generation-secops-engineer.json","meta":{"generated_at":"2026-11-09T13:50:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18474,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8524},"rest":"https://alion.io/mcp/rest/get_company?id=8524"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcsc-generation-secops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcsc-generation-secops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcsc-generation-secops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/csc-generation-secops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcsc-generation-secops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1120298}},{"tool":"search_jobs","arguments":{"company":"cscgeneration.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1120298},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}