{"id":3779477,"url":"https://alion.io/job/fleetio-senior-security-operations-engineer","title":"Senior Security Operations Engineer","company":{"id":3577,"name":"Fleetio","domain":"fleetio.com","url":"https://alion.io/company/fleetio","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":5,"ghost_share":0,"stale_share":0.2,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"Falcon","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Okta","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Function Calling","optional":true},{"name":"LLM","optional":true},{"name":"Model Context Protocol","optional":true}],"status":"live","first_seen_at":"2026-11-04T19:40:34Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-07T08:41:27Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"A little about us…Fleetio is a modern software platform that helps thousands of organizations worldwide manage their fleet operations. Transportation technology is a hot market, and we’re leading the charge with raving fans and new customers signing up every day. We raised $450M in our Series D funding round in March of 2025 and are on an exciting trajectory as a company. Fleetio is also a proud founding member of the Rails Foundation!\nMore about our team and company:\nFleetio overview video: https://www.youtube.com/watch?v=YoXyXTFWbkg\nOur careers page: https://www.fleetio.com/careers\nDescription\nOur Business Technology team is looking for a Senior Security Operations Engineer to own the security of the tools, devices, identities, and data Fleetians rely on every day. You will help run corporate security operations end to end, covering detection and response, identity, endpoint, email, and SaaS security, data loss prevention, AI security, and vulnerability management, and make the day-to-day security calls that keep Fleetio safe.\nYou will be hands-on: engineering controls, writing and tuning detections, automating response, and closing gaps, not just administering tools. The goal is one connected defense, not a collection of consoles: a signal from Okta, CrowdStrike, Mimecast, or Google Workspace should drive action in the others automatically, so the environment protects itself and people step in only where judgment is needed. Around-the-clock monitoring is handled by our external SOC (CrowdStrike Falcon Complete); this role engineers the environment it watches, owns what happens when it escalates, and extends what it can see. You will work closely with our IT Operations and Compliance teams, our 3rd party SOC, and the Product Security team in Platform Engineering.\nOur team treats AI as a core part of how we work. We build and use AI agents and automated workflows to handle toil, speed up investigation and response, and give our team more time for high-leverage work.\nWho You Are\nOur ideal candidate is a security engineer who likes to build. You are as comfortable writing a detection or a response playbook as you are working an incident. You think in systems: you see the gaps between tools and close them by wiring the tools together. You make sound security decisions on your own, explain them clearly to technical and non-technical people, and balance risk with how people actually work.\nYou stay calm when something breaks. You can take a vague report, work out quickly what happened and who is affected, and give leaders a clear, evidence-backed answer. Then you fix the root cause so it doesn't happen the same way twice.\nYou're curious about how AI is changing security operations, and you're eager to put it to work on triage, enrichment, and response.\nYour Impact\nAs a Senior Security Operations Engineer on Fleetio's Business Technology team, you will:\nOwn detection engineering and threat hunting in CrowdStrike Next-Gen SIEM: onboard log sources, write and tune detections across identity, email, SaaS, and endpoint telemetry, and keep false positives down\nOwn security automation: chain our tools together through CrowdStrike Fusion SOAR and our workflow automation platform so a signal in one (a risky Okta sign-in, a Falcon detection, a Mimecast hit, a Google Workspace sharing change) triggers enrichment, containment, paging, and ticketing in the others, plus AI agents that speed up triage and investigation, so routine response runs without waiting on a human\nLead corporate incident response as technical lead, including third-party and supply-chain events: scope exposure quickly, confirm or rule out compromise, run forensics, tell leaders and employees what to do, keep runbooks current with Product Security, and serve in the escalation rotation, backing up the Incident Commander when needed\nOwn CrowdStrike Falcon configuration and detections, manage the Falcon Complete relationship and escalations, and maintain device trust checks and an inventory of software and extensions on company devices with clear guidance on approved tools\nOwn Okta authentication policy, MFA, session policy, and privileged access management, and automate user access reviews and audit evidence with Compliance so SOC 2 controls run with less manual effort\nOwn Mimecast policy, secure network access, Google Workspace and key SaaS security settings, and SaaS security posture in CrowdStrike Falcon Shield, driving findings to closure with app owners\nOwn data loss prevention: define and classify Fleetio's sensitive data, design and tune DLP policies across email (Mimecast), Google Workspace, endpoints (CrowdStrike), and key SaaS apps, and investigate and respond to data exposure, whether from accidental oversharing, a compromised account, or insider misuse\nOwn security for Fleetio's use of AI: visibility into AI tool usage, identity and access for AI agents, guardrails for internal agents and automations, and AI detection and response (CrowdStrike Falcon Guardian, formerly AIDR)\nRun vulnerability management for corporate assets, prioritizing by exploitability and holding owners to fix deadlines, and report on security posture with clear, honest metrics that help set program priorities\nYour Experience\n5+ years of experience in security operations, detection and response, or security engineering, ideally at a SaaS company\nDetection engineering and threat hunting in a SIEM (CrowdStrike Next-Gen SIEM or similar)\nSecurity automation: building SOAR playbooks (CrowdStrike Fusion or similar) that connect identity, endpoint, email, and SaaS tools into a single response flow, with Python or PowerShell and REST APIs\nIncident response from first triage through forensics, root cause, and follow-up across cloud, identity, and SaaS environments, including working with an MDR or managed SOC provider\nIdentity security with Okta or a similar provider: authentication policy, privileged access, and access reviews in a SOC 2 or ISO 27001 control environment\nEndpoint security with CrowdStrike or similar, including macOS, plus device trust and endpoint query tooling\nEmail security (Mimecast or similar) and SaaS security posture management\nDesigning and running a DLP program: data classification, policy design and tuning across email, cloud collaboration, and endpoints, and investigating data exposure\nSecuring developer tooling and the software supply chain (IDE extensions, package registries, AI coding tools)\nExcellent written and verbal communication skills, including explaining risk to non-technical leaders\nConsidered a Plus\nExperience securing a company's use of AI: AI tool governance, identity and access for agents, data-exposure and prompt-injection risk, and AI detection and response tooling (CrowdStrike Falcon Guardian/AIDR or similar)\nExperience building AI agents, LLM-powered automations, or integrations (e.g., using tool/function calling or MCP) for security operations workflows\nExperience using LLMs on real security alerts for triage, enrichment, and investigation\nBenefits \nMultiple health/dental coverage options (100% coverage for employee, 50% for family)\nVision insurance\nIncentive stock options\n401(k) match of 4%\nPTO - 4 weeks (increases at year two!)\n12 company holidays + 2 floating holidays\nParental leave - birthing parent (16 weeks paid) non-birthing (4 weeks paid)\nFSA & HSA options\nShort and long term disability (short term 100% paid)\nCommunity service funds\nProfessional development funds\nWellbeing fund - $150 quarterly\nBusiness expense stipend - $125 quarterly\nMac laptop + new hire equipment stipend\nFully stocked kitchen with tons of drinks & snacks (BHM only)\nRemote working friendly since 2012 #LI-Remote\nFleetio provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment. We celebrate diversity and are committed to creating an inclusive environment for all. All employment is decided on the basis of qualifications, merit and business need.\nThis application is not intended to and does not create a contract or offer of employment. Employment with Fleetio is at will.\nIf you have a disability or a special need that requires an accommodation to fill out the online application, please let us know by calling (205) 718-7500.","description_format":"text","description_chars":8283,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Professional development","Stock options","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Fleet Management"],"lifecycle":[{"event":"open","at":"2026-11-05T00:23:29Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":45,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/fleetio-senior-security-operations-engineer","json_url":"https://alion.io/job/fleetio-senior-security-operations-engineer.json","meta":{"generated_at":"2026-11-07T12:10:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13297,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3577},"rest":"https://alion.io/mcp/rest/get_company?id=3577"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffleetio-senior-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffleetio-senior-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffleetio-senior-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fleetio-senior-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffleetio-senior-security-operations-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3779477}},{"tool":"search_jobs","arguments":{"company":"fleetio.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3779477},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}