{"id":3891416,"url":"https://alion.io/job/openlane-sre-security-engineer","title":"SRE Security Engineer","company":{"id":16973,"name":"OPENLANE","domain":"openlane.com","url":"https://alion.io/company/open-lane","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":94,"open_postings":13,"ghost_share":0,"stale_share":0.231,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"ChatGPT","optional":false},{"name":"Claude","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Okta","optional":false},{"name":"OpenAI","optional":false},{"name":"Terraform","optional":false},{"name":"Unix","optional":false},{"name":"Amazon CloudWatch","optional":true},{"name":"Bash","optional":true},{"name":"Grafana","optional":true},{"name":"OpenLane","optional":true},{"name":"Prometheus","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-11-06T21:30:32Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T02:52:04Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Who We Are:\nAt OPENLANE we make wholesale easy so our customers can be more successful. \nWe’re a technology company building the world’s most advanced-and uncomplicated-digitalmarketplace for used vehicles.\nWe’re a data company helping customers buy and sell smarter with clear, actionable insights they can understand and use.\nAnd we’re an innovation company accelerating the future of wholesale remarketing through curiosity, collaboration, and an entrepreneurial spirit.\nOur Values:\nDriven Waybuilders. We pursue challenges that inspire us to build, create, and innovate.\nRelentless Curiosity. We seek to understand and improve our customers’ experience.\nSmart Risk-Taking. We transform risk into progress through data, experience, and intuition.\nFearless Ownership. We deliver what we promise and learn along the way.\nWe're Looking For\nAn SRE Security Engineer who takes ownership of security findings from detection through resolution - remediating misconfigurations, vulnerabilities, and access issues across AWS, Azure, GCP, GitHub, Okta, and Active Directory. You will join a new SRE Security Engineering team formed to close the gap between what Security reports and what actually gets fixed: you will work hands-on inside cloud and identity platforms to drive issues to closure, rather than simply tracking tickets.\nYou Are\nAnalytical, decisive, accountable, collaborative, security-minded, and action-oriented.\nYou Bring\nCore knowledge of identity and access management concepts (RBAC/ABAC, least privilege, federation, SSO) across cloud platforms and on-prem directory services.\nFunctional expertise interpreting findings from vulnerability scanners and cloud security posture tools, and translating them into prioritized, actionable remediation.\nTechnical expertise remediating issues across AWS, Azure, GCP, GitHub, Okta, and Active Directory - including policy and permission tightening, credential rotation/revocation, group and role cleanup, and network/security-group hardening.\nCore SRE fundamentals: Linux/Unix systems administration, networking, and infrastructure-as-code (Terraform or equivalent), enough to diagnose and change the systems being remediated.\nActive, daily use of AI assistants such as Claude, Gemini, and OpenAI/ChatGPT to speed up investigation, triage, and remediation work.\nYou Own\nEnd-to-end remediation of security findings sourced from Ox, Upwind, Socket, vulnerability scans, and direct Security team reports, across all major cloud and identity platforms.\nTriage and validation of incoming findings - distinguishing true positives from noise and prioritizing based on risk.\nA rotating on-call responsibility for urgent security alerts requiring same-day action.\nAdherence to SRE's standard change-management process for any remediation that touches production infrastructure, ensuring changes are reviewed and approved before deployment.\nTimely patching of known vulnerabilities and dependency findings across AWS, Azure, GCP, GitHub, Okta, and Active Directory systems.\nYou Drive\nExecution: Close the loop between security detection and resolution, reducing the backlog of unresolved findings and shortening time-to-remediate for critical issues.\nResults: Measurably shrink the population of standing security findings across AWS, Azure, GCP, GitHub, Okta, and Active Directory, and reduce recurrence through root-cause fixes rather than one-off patches.\nTeam: Contribute to remediation playbooks and runbooks as the team matures, and share platform-specific expertise with Security and SRE.\nHow You'll Use AI in This Role\nAI assistants such as Claude, Gemini, and OpenAI/ChatGPT are a standard part of how this team works, not an optional add-on. Expect to use them daily to triage and summarize scan output from Ox and Upwind, draft and review remediation scripts and infrastructure-as-code changes, and speed up root-cause investigation across unfamiliar systems.\nWho You Will Work With\nReporting to the SRE Director, this role sits within Site Reliability Engineering and partners daily with the Security team (who surface findings via Ox, Upwind, Socket, and vulnerability reports), fellow SRE platform teams (who review and approve production-impacting changes), Engineering Leadership and their developers (on remediation affecting their applications and services), and the rest of the SRE Security Engineering team.\nWhere You Work\nYour work is performed as a Remote employee, with occasional team alignment meetings as needed.\nMust Have's\n2 to 4 years of experience in SRE, cloud security, security engineering, or a closely related systems/security role.\nHands-on experience remediating security issues in at least two of: AWS, Azure, GCP, GitHub, Okta, Active Directory.\nWorking knowledge of cloud security posture management / vulnerability scanning tools (e.g., Ox, Upwind, Socket, or similar) and the ability to assess and act on their findings.\nComfort owning an issue from intake through resolution, including coordinating changes with other engineering teams.\nExperience with infrastructure-as-code (e.g., Terraform) and container/orchestration platforms (Docker, Kubernetes/EKS), enough to remediate infrastructure-level findings directly rather than routing them to another team.\nExperience participating in an on-call rotation and responding to production incidents.\nNice to Have's\nDirect experience with Ox, Upwind, or Socket.\nRelevant cloud or identity certifications (AWS, Azure, GCP, Okta) - not required, but a plus.\nScripting/automation experience (Python, Bash) to remediate findings at scale rather than one-by-one.\nExperience with observability and monitoring tooling (e.g., Grafana, CloudWatch, Prometheus) to spot recurring issues and verify fixes.\n What We Offer:\nCompetitive pay\n\nMedical, dental, and vision benefits with employer HSA contributions (US) and FSA options (US)\n\nImmediately vested 401K (US) or RRSP (Canada) with company match\n\nPaid Vacation, Personal, and Sick Time\n\nPaid maternity and paternity leave (US)\n\nEmployer-paid short-term disability, long-term disability, life insurance, and AD&D (US)\n\nRobust Employee Assistance Program\n\nEmployer paid Leap into Service Day to volunteer\n\nTuition Reimbursement for eligible programs\n\nOpportunities to expand your skill set and share your knowledge across a publicly traded, global organization\n\nCompany culture of internal promotions, diverse career paths, and meaningful advancement\n\n Sound like a match? Apply Now - We can't wait to hear from you!","description_format":"text","description_chars":6489,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Auctions","Marketplaces"],"lifecycle":[{"event":"open","at":"2026-11-06T21:30:32Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":4,"green_card_filings_12m":0,"median_offered_wage_usd":197500,"route":null,"cap_exempt":false,"checked_at":"2026-11-06T22:30:08+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":34,"reasons":["conf:2","velocity","win:early","comp:junior,brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/openlane-sre-security-engineer","json_url":"https://alion.io/job/openlane-sre-security-engineer.json","meta":{"generated_at":"2026-11-07T07:39:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3064,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":16973},"rest":"https://alion.io/mcp/rest/get_company?id=16973"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopenlane-sre-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopenlane-sre-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopenlane-sre-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/openlane-sre-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopenlane-sre-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3891416}},{"tool":"search_jobs","arguments":{"company":"openlane.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3891416},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}