{"id":3837865,"url":"https://alion.io/job/flight-schedule-pro-senior-security-operations-engineer","title":"Senior Security Operations Engineer","company":{"id":2020727,"name":"Flight Schedule Pro","domain":"flightschedulepro.com","url":"https://alion.io/company/flightschedulepro","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Overland Park, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":120000,"max":130000,"currency":"USD","period":"year","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-05T18:15:05Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-08T05:43:50Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Pilotbase:\nPilotbase is a connected system that brings together flight schools, pilots, and industry partners into a single, data-driven network. This next phase of growth is focused on expanding within our existing customer base, reaching pilots directly, and creating new revenue streams across the ecosystem.\nJob Overview: \nAs the Senior Security Operations Engineer, you will own the hands-on security functions of the team implementing controls, closing findings, running detection and response, and producing the evidence our compliance programs depend on. The Security Manager sets the standards, you make them real, and show that they hold. You will work across endpoints, cloud, identity, applications and vendor security, ranging from alert triage through to control design by researching options and proposing designs or tooling.\nResponsibilities:\nThe primary function is accountability for security outcomes in your domains being achieved and demonstrable. Where a control is claimed, you implement it, operate it, enforce its SLA, and evidence it. This role implements, operates, remediates and evidences. It also offers guidance and suggestions on proposing standards, policies, compliance frameworks and security tooling. As the team and the company scale, this role will grow to include additional related responsibilities.\nRemediation and Closure\n Owns closure of security findings end to end: triage, prioritisation against the standard, driving the remediation cycle against existing findings with platform owners, and verifying closure. Closure, not detection, is the deliverable.\n Manages, reviews and drives outcomes against penetration tests, vulnerability and posture scans, audit gaps, access reviews, and CVEs across the estate.\n Security is an overlay onto other domains, so where security does not own the platform you own the finding and its closure while holding the platform owner (IT, DevOps, Engineering, etc) to executing the fix.\nFunctional Security\nEndpoint security direction and Tier 1 asset hardening.\nVulnerability and application security scanning, and enforcement of its SLA.\nCloud security posture management: stand up, then SLA enforcement.\nData loss prevention: prevention and monitoring controls.\nAccess control: least privilege, dual control, and other access validations.\n Network Security implementation at the cloud edge (alongside DevOps).\nDetection and Response\n Operates managed detection and response end to end, including day to day interactions with the provider.\nFirst responder for security events, carrying triage through to closure.\nExternal phishing investigation and prevention.\nSelection, implementation, and operation of a SIEM (when approved).\nAudit Evidence and Control Operation\n Produces and packages audit evidence for compliance frameworks (SOC 2 Type II, PCI DSS v4, etc) where automated collection cannot reach it.\nRuns the recurring access review cycles; mitigates, remediates, or otherwise drives corrections.\n Builds the controls that close audit gaps, and returns the evidence that shows they operate.\nTooling, Design and Automation\n Researches, vets and recommends security tooling; owns day to day use once approved.•\nDrafts solution designs for new controls; implements on approval.\nSupports security architecture reviews for new services and integrations.\nBuilds and maintains automation to remove recurring manual work from role scope.\nAlso Supports\n Technical contact for the QSA, ASV and external auditor, including the quarterly external scan cycle.\n Security questionnaires (CAIQ, HECVAT, etc) answered from the evidence library, and upkeep of that library.\nReview of vendor security assessments.\n Security awareness training, including Internal phishing simulation campaigns and content recommended for approval.\nQualifications:\nREQUIRED: \nExperience: 5+ years full time in an in-house security role, with hands-on ownership of controls in one or more of the domains above, and a track record of driving findings to verified closure.\nTechnical Skills:\nIdentity and access including least privilege, privileged access, conditional access, and running access reviews.\nDetection and response using an EDR, a SIEM or a managed provider, from triage through containment.\nVulnerability management measured by closure rather than detection.\nAudit evidence production for SOC 2, ISO 27001, HITRUST, PCI or equivalent, as a deliverable rather than background knowledge.\nEndpoint management and hardening across macOS and Windows.\nScripting in PowerShell, Python or Bash, with API integration.\nAI tooling Fluent use of major platforms as a daily driver.\nOPTIONAL\nCloud security posture management in Azure or AWS.\nData loss prevention deployed and monitored (beyond policy writing).\nNetwork security implementation: segmentation, firewalls, VLANs and VPNs.\nDirect work with a PCI-DSS QSA, ASV or external auditor (as the technical contact).\nComfortable presenting to all levels of the company (executives to junior colleagues)\nCertifications: CISSP, CISM, GIAC (GSEC, GCIH, GCIA), CompTIA Security+ or CySA+, Microsoft SC-200 or AZ-500, AWS Certified Security Specialty.\nBenefits: \nFull benefits package (Medical, Dental, Vision, Short-Term Disability, Life Insurance, 401(k) plan)\nEquity Appreciation Plan\nFlexible Time Off policy \nSeven (7) company-wide paid holidays + two (2) floating holidays \nTwo (2) wellness days\nEmployee Assistance Program\nProfessional Development Stipend\nHome Office Stipend \nCompensation: \nThe salary range for this role has been established at $120,000.00 - $130,000.00 annually. The final agreed-upon compensation is based on a number of factors, including but not limited to: individual education, qualifications, skills, prior work experience, competencies, and geographic work location. The above salary range represents the Company’s good faith and reasonable estimate of the range of possible compensation at the time of posting.\nTravel Requirements:\nOccasional business travel may be required, up to 10%.\nDeadline for Applications: \nThe company will accept ongoing applications until the role is filled. There is no deadline to apply for this position.\nPilotbase is an equal opportunity employer and encourages all qualified individuals to apply. If you're excited about this role, we'd love a chance to review your resume. We value a diverse and inclusive work environment and look for passionate people who are ready to do great things. If there is a required or preferred location for an open role, it will be listed in the job description. All applicants for employment must be legally authorized to work in the United States. Pilotbase does not provide work visa sponsorship at this time.\nThis employer participates in the Electronic Employment Verification Program. Please visit https://www.e-verify.gov/about-e-verify for more information.\nPilotbase welcomes all direct applicants, but does not utilize recruiting services from external agencies.","description_format":"text","description_chars":6971,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Home office","Life insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["General Aviation","Scheduling & Booking Software"],"lifecycle":[{"event":"open","at":"2026-11-05T21:37:51Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:0","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":false},"html_url":"https://alion.io/job/flight-schedule-pro-senior-security-operations-engineer","json_url":"https://alion.io/job/flight-schedule-pro-senior-security-operations-engineer.json","meta":{"generated_at":"2026-11-08T05:44:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12452,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2020727},"rest":"https://alion.io/mcp/rest/get_company?id=2020727"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fflight-schedule-pro-senior-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fflight-schedule-pro-senior-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fflight-schedule-pro-senior-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/flight-schedule-pro-senior-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fflight-schedule-pro-senior-security-operations-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3837865}},{"tool":"search_jobs","arguments":{"company":"flightschedulepro.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3837865},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}