{"id":2483910,"url":"https://alion.io/job/holman-information-security-solutions-engineer-ii","title":"Information Security Solutions Engineer II","company":{"id":1699,"name":"Holman","domain":"holman.com","url":"https://alion.io/company/holman-deutschland","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":105050,"max":149700,"currency":"USD","period":"year","gross":null,"usd_annual":149700},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"42Crunch","optional":false},{"name":"Akamai","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Bicep","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Falcon","optional":false},{"name":"Fastly","optional":false},{"name":"FinOps","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"Node JS","optional":false},{"name":"Orca Security","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Prisma","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"SIEM","optional":false},{"name":"Snyk","optional":false},{"name":"StackHawk","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"Terragrunt","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Veracode","optional":false},{"name":"Windows","optional":false},{"name":"Wiz","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-13T23:45:11Z","employer_posted_date":null,"last_verified_at":"2026-10-13T23:45:11Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"This a Full Remote job, the offer is available from: United States, New Jersey (USA)\nHolman is a family-owned, global automotive services organization anchored by our deeply rooted core values and principles that have enabled us to continue Driving What’s Right throughout the last century. Our teams deliver the Holman Experience by treating our customers and each other as we would like to be treated, and creating positive, rewarding relationships all around.\nThe automotive markets Holman serves include fleet management and leasing; vehicle fabrication and upfitting; component manufacturing and productivity solutions; powertrain distribution and logistics services; commercial and personal insurance and risk management; and retail automotive sales as one of the largest privately owned dealership groups in the United States.\nHolman is looking for a Security Engineer to work where cloud infrastructure and software development meet. You will review and design security architecture for our cloud environments, maintain our application security tooling, and work directly with development teams to threat model applications and find and fix vulnerabilities. You will also perform third-party vendor security reviews, support our work with external penetration testing partners, help secure our growing use of AI, and take part in incident response as part of the broader security team.\nPrincipal Purpose of Position\nSecurity Engineering\nReview cloud security solutions and contribute to secure architecture designs for Azure and AWS environments, turning business requirements into practical security controls.\nProvide security architecture guidance and design patterns to Infrastructure, Cloud, and Development teams.\nBuild, deploy, and maintain security infrastructure as code with Terraform, Terragrunt, ARM, and Bicep, so that controls stay consistent, version-controlled, and repeatable.\nPerform third-party vendor security reviews: assess vendor architecture, controls, and risk, document findings, and recommend mitigations or acceptance criteria.\nContribute to the security architecture and operation of enterprise AI platforms, including MCP gateways, LLM routers, and AI gateways. This covers access control and tool permissions, prompt injection and data leakage risks, AI usage and cost governance (FinOps), and observability and logging of AI activity.\nKeep documentation of security controls, configurations, architecture decisions, and procedures accurate and current.\nSoftware Security\nPerform threat modeling with development teams on new and existing applications, and work with developers to understand vulnerabilities and architectural security issues, supporting remediation through to verified closure.\nSupport the IAM team on cloud and application identity security, including workload and managed identities, service principals, least-privilege role design, secrets handling, and application authentication and authorization patterns.\nAdminister and maintain application and cloud security tooling, including cloud security posture, runtime application security, and API security testing platforms. This covers configuration, tuning, integrations, and keeping findings accurate.\nHelp integrate security controls and testing into CI/CD pipelines and developer workflows.\nWork with third-party penetration testing providers to support scoping, ongoing attack surface assessment, results triage, and remediation tracking.\nReport vulnerability exposure, remediation status, and risk to application owners and management.\nIncident Response & General\nParticipate in incident response activities, contributing cloud and application security expertise to investigation, containment, and remediation.\nLead specific initiatives or workstreams when delegated.\nShare knowledge with peers and developers on secure design and coding practices.\nStay current on cloud and application threats, attack techniques, and security technologies, and recommend improvements to Holman's security posture.\nPerform other duties and special projects as assigned.\nRelevant Work Experience\n5-7 years of combined information security and technical engineering experience, with significant time in cloud security, application security, or both.\nStrong experience securing Microsoft Azure and Amazon AWS environments in cloud-native and hybrid architectures.\nHands-on experience writing and maintaining infrastructure as code with Terraform (Terragrunt a plus), ARM, and/or Bicep.\nAbility to read and reason about application code in at least one of .NET, Python, Ruby, or Node.js, well enough to explain a vulnerability and its fix to a developer.\nStrong working knowledge of OWASP Top 10, OWASP API Security Top 10, threat modeling methodologies (e.g., STRIDE), and secure software development practices.\nWorking knowledge of cloud and application identity: Entra ID and AWS IAM, managed identities and service principals, RBAC and least privilege, and OAuth 2.0/OpenID Connect.\nExperience operating application and cloud security tooling, such as CNAPP/CSPM (e.g., Wiz, Prisma Cloud, Orca Security, CrowdStrike Falcon Cloud Security), application security testing (e.g., Contrast Security, Checkmarx, Veracode, Snyk, Black Duck Seeker), and API security (e.g., APISec, Salt Security, Traceable, 42Crunch, StackHawk).\nExperience with manual application testing tools such as Burp Suite or OWASP ZAP.\nExperience performing third-party vendor security assessments.\nFamiliarity with edge, WAF, and CDN platforms such as Cloudflare, Akamai, Fastly, or Imperva.\nWorking knowledge of Microsoft Windows and the Microsoft 365 suite, including Entra ID and Intune.\nFamiliarity with security frameworks such as MITRE ATT&CK, NIST CSF, NIST 800-53, CIS Controls, and ISO 27001/27002.\nStrong scripting ability in Python or PowerShell.\nClear communicator who can explain technical risk to developers, vendors, and management.\nPreferred\nDefensive security experience: incident response, EDR, SIEM investigation and query languages (e.g., KQL, SPL), or detection engineering.\nAI security experience: securing LLM-based applications and agents, MCP servers and gateways, or LLM routers, with familiarity in OWASP Top 10 for LLM Applications, MITRE ATLAS, or NIST AI RMF.\nExperience with cloud FinOps practices and observability platforms (logging, metrics, tracing), particularly as applied to AI and security workloads.\nContainer and Kubernetes security experience (e.g., AKS, EKS), including image scanning and runtime protection.\nExperience working with penetration testing, PTaaS, or crowdsourced security testing providers.\nFamiliarity with PCI DSS, ISO 27001, GDPR, NYDFS Part 500, and TISAX. Compliance is owned by a dedicated GRC team; this role supports implementing the technical controls behind it.\nCertifications such as CISSP, GIAC (GCSA, GWEB, GCIH, or similar), OSCP, AWS Security Specialty, or Azure Security Engineer (AZ-500).\nEducation and/or Training\nBachelor's degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent work experience.\nAt Holman, we exist to provide rewarding careers and better lives for employees and their families. We hire, train, empower, and reward exceptional people. Our journey is guided by our desire to get it right every time and the acknowledgement that we have an opportunity to be better. To be better, we have to do better, and to do better we must know better. That’s why we are listening, open to learning new things - about ourselves and each other. We will never stop striving for improved diversity, equity, and inclusion because we are successful together when we feel trusted and supported. It’s The Holman Way.\nAt Holman, your total compensation goes beyond your paycheck. To position you for success and provide a rewarding career and better life for you and your family, Holman is proud to offer you the benefits you deserve; including protection against illness, disability, loss of work, or preparation for retirement. Below is a brief overview of the programs available to full-time employees (programs may vary by country or worker type):\nHealth Insurance\nVision Insurance\nDental Insurance\nLife and Disability Insurance\nFlexible Spending and Health Savings Accounts\nEmployee Assistance Program\n401(k) plan with Company Match\nPaid Time Off (PTO)\nPaid Holidays, Bereavement, and Jury Duty\nPaid Pregnancy/Parental leave\nPaid Military Leave\nTuition Reimbursement\nBenefits:\nRegular Full-Time\nWe offer excellent benefits including health, vision, dental, life and disability insurance, and 401(k) with company match. Our time off benefits include Paid Time Off (PTO), paid holidays, bereavement, and jury duty. In addition, we offer paid pregnancy and parental leave, and supplemental paid military leave to eligible employees.\nClick here for Washington State benefit information.\nTemporary or Part-Time\nIn geographic areas with statutory paid sick leave, part-time and temporary employees will receive a paid sick leave benefit that meets the mandated requirements.\nClick here for Washington State benefit information.\nPay:\nWe offer competitive wages that are commensurate with job-related skills, experience, relevant education or training, and geographic location, starting in the range of $105,050.00 - $149,700.00 USD annually for full time employees. The annual compensation range is comprised of base pay earnings.Artificial Intelligence Statement\nWe recognize that applicants for positions at any organization may view AI tools for tasks such as drafting a resume or cover letter, provided the information is accurate and truthful. However, applicants should not use AI tools to:\nAnswer interview questions on their behalf, or use AI tools in any way during the interview or other qualification process(es).\n\nMisrepresent or embellish qualifications, skills, or experience\n\nCreate false or misleading representations of identity (e.g., deepfakes or altered images/videos)\n\nYour application, whether an AI tool is used or not, should reflect your authentic abilities and experiences. Any use of AI that compromises honesty or integrity may result in disqualification from the process.\nEqual Opportunity Employment and Accommodations:\nHolman provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.\nIf you are a person with a disability needing assistance with the application process, please contact\n\nThis policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.","description_format":"text","description_chars":10944,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Equity","Health insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Professional Services","Logistics","Military Logistics","Supply Chain"],"lifecycle":[{"event":"open","at":"2026-10-13T23:45:11Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":149700,"is_top_pay":true},"html_url":"https://alion.io/job/holman-information-security-solutions-engineer-ii","json_url":"https://alion.io/job/holman-information-security-solutions-engineer-ii.json","meta":{"generated_at":"2026-10-15T08:18:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12650,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1699},"rest":"https://alion.io/mcp/rest/get_company?id=1699"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fholman-information-security-solutions-engineer-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fholman-information-security-solutions-engineer-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fholman-information-security-solutions-engineer-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/holman-information-security-solutions-engineer-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fholman-information-security-solutions-engineer-ii"}]}