{"id":127813,"url":"https://alion.io/job/indico-data-senior-cybersecurity-engineer-indico-data","title":"Senior Cybersecurity Engineer - Indico Data","company":{"id":48087,"name":"Indico Data","domain":"indicodata.ai","url":"https://alion.io/company/indico-data","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":207000,"period":"year","method":"global_role_seniority_cell","sample_n":2094},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Helm","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-27T06:45:44Z","employer_posted_date":"2026-09-20","last_verified_at":"2026-10-18T05:11:26Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"Senior Cybersecurity Engineer\nLocation: USA, East Coast Preferred\nExperience Required: 6-10 years\nAbout the Position\nThe Senior Cybersecurity Engineer is a hands-on technical security role responsible for improving Indico’s security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response.\nThis role works in partnership with Indico’s CISO and CTO. The CISO owns security strategy, formal risk acceptance, policy approval, and executive accountability. The Senior Security Engineer turns that direction into practical technical controls, security reviews, operating processes, and cross-functional execution.\nThis role acts as a security check and balance for Engineering and Platform. You will review technical work against defined security expectations, request changes where needed, and help teams build secure systems without creating unnecessary friction.\nSecurity does not own every security task. Engineering and Platform own implementation and remediation for the systems they build and run, including CVEs, infrastructure changes, CI/CD permissions, committed-secret remediation, and production access implementation. IT/Ops, People Ops, and system owners own day-to-day access administration. The Senior Security Engineer owns technical security standards, reviews, escalation paths, control design, and program execution.\nThis is a remote role, with East Coast hours preferred.\nAbout You\nYou are a pragmatic technical security generalist with strong cloud security instincts. You are comfortable working across AWS, Kubernetes, IAM, networking, secrets management, CI/CD, monitoring, product security, and incident response.\nYou are technical enough to earn credibility with Engineering and Platform, independent enough to act as a real check and balance, and practical enough to focus on controls that reduce meaningful risk.\nYou know how to make security work in a startup: focus on the risks that matter, keep the process lightweight, and build guardrails that help teams move quickly without creating unnecessary exposure.\nResponsibilities\nImprove Indico’s technical security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response\nPartner with the CISO and CTO to turn security priorities into practical technical controls, standards, reviews, and operating processes\nReview Engineering work against security standards, with authority to request changes where needed\nPartner with Engineering on AWS security controls, including IAM, networking, account structure, logging, encryption, key management, backups, production access, and customer-dedicated environments\nReview and improve Kubernetes and container security controls, including workload identity, RBAC, network boundaries, image security, runtime monitoring, and deployment patterns\nDefine and improve secure CI/CD patterns, including GitHub permissions, branch protections, privileged workflows, secrets handling, release controls, and deployment access\nDefine and oversee processes for vulnerability management, committed-secret response, secure development, incident response, and access control while Engineering, Platform, IT/Ops, and system owners operate them in their domains\nProvide product security support, including secure design review, threat modeling for sensitive features, scanner tuning, and high-risk change review\nImprove detection and response coverage across tools such as CloudTrail, GuardDuty, CrowdStrike, SIEM/logging platforms, vulnerability scanners, and secrets detection\nOwn day-to-day security monitoring and response operations, including alert routing, triage expectations, escalation paths, and detection improvements\nCoordinate technical containment during security incidents across Engineering, Platform, IT/Ops, and leadership\nMaintain incident response runbooks and partner with the CISO on severity, executive escalation, counsel/compliance coordination, and customer communication strategy\nCreate practical security guidance, standards, procedures, and runbooks for security-sensitive work such as production access, secrets handling, vulnerability remediation, incident response, customer data handling, and secure engineering\nMaintain reusable technical security documentation, standard responses, and evidence packages for customer due diligence and compliance support\nEvaluate security tools and vendors with a focus on technical coverage, operational fit, and reducing manual work\nBuild or sponsor lightweight automation, checks, dashboards, and workflows that make security controls repeatable\nRequirements\n6+ years of relevant security experience, ideally in a startup, SaaS, cloud-native, or enterprise software environment\nStrong hands-on experience with AWS security, including IAM, networking, logging, monitoring, encryption, access controls, and production security\nExperience securing Kubernetes, containers, CI/CD pipelines, infrastructure-as-code, and modern cloud deployment patterns\nStrong understanding of identity and access management, least privilege, privileged access, workload identity, and service-to-service permissions\nWorking knowledge of application and product security, including authentication, authorization, secure coding, common web risks, and secure design review\nExperience defining or operating vulnerability management, secrets management, secure development, access control, or incident response processes\nExperience with secrets management, cloud key management, encryption design, data residency, threat modeling, or secure SDLC programs\nExperience with security monitoring, alert triage, incident response coordination, and remediation tracking\nExperience with Python, Go, Bash, or other scripting languages for security automation\nAbility to review infrastructure, application, and operational changes for material security risk\nAbility to partner with Engineering and Platform while maintaining appropriate independence and oversight\nStrong written and verbal communication skills, including clear technical guidance, standards, runbooks, and customer-facing security documentation\nGood judgment around risk prioritization, compensating controls, exceptions, and startup-appropriate tradeoffs\nAbility to operate independently, create structure, and drive work to completion\nBonus\nExperience as a first or early security hire at a startup\nExperience securing single-tenant SaaS or customer-dedicated cloud environments\nExperience with AWS EKS, Terraform, Helm, ArgoCD, GitHub Actions, or similar infrastructure tooling\nExperience with CrowdStrike\nExperience supporting SOC 2, ISO 27001, HIPAA, GDPR, customer audits, or enterprise security questionnaires\nPragmatic, risk-based, comfortable with ambiguity, and focused on security practices people actually use","description_format":"text","description_chars":6802,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Workflow & Process Automation (RPA, BPM)","InsurTech"],"lifecycle":[{"event":"open","at":"2026-08-27T06:45:44Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.564,"p_room":0.55,"age_days":50,"expected_fill_days":35,"reasons":["conf:1","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/indico-data-senior-cybersecurity-engineer-indico-data","json_url":"https://alion.io/job/indico-data-senior-cybersecurity-engineer-indico-data.json","meta":{"generated_at":"2026-10-18T05:54:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8814,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48087},"rest":"https://alion.io/mcp/rest/get_company?id=48087"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Findico-data-senior-cybersecurity-engineer-indico-data"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Findico-data-senior-cybersecurity-engineer-indico-data"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Findico-data-senior-cybersecurity-engineer-indico-data"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/indico-data-senior-cybersecurity-engineer-indico-data\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Findico-data-senior-cybersecurity-engineer-indico-data"}]}