{"id":3634714,"url":"https://alion.io/job/relativity-security-engineer","title":"Security Engineer","company":{"id":2576,"name":"Relativity","domain":"relativity.com","url":"https://alion.io/company/relativity","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90000,"max":134000,"currency":"USD","period":"year","gross":null,"usd_annual":134000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Defense in Depth","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"Red Teaming","optional":true},{"name":"SOC 2","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-11-02T20:50:47Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T06:03:30Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Posting Type\nHybrid/Remote\nJob Overview\nThe Security Engineer is a security practitioner responsible for implementing, operating, and continuously improving enterprise security capabilities across endpoint, network, identity, cloud, and data security domains. Operating within Relativity’s layered defense-in-depth program, this engineer independently executes security engineering initiatives, investigates security events and exposures, develops security automation, and partners with cross-functional teams to improve security visibility, resilience, and operational effectiveness.This role contributes to detection and response capabilities, security hardening efforts, threat hunting activities, and exposure reduction initiatives while gaining broader expertise across the enterprise security ecosystem.\nJob Description and Requirements\nLayered Defense/Defense in Depth\nImplement, configure, and maintain security controls that span perimeter, network, host, application, identity and data layers, ensuring and maintaining effectiveness of controls at each layer.\nCollaborate cross-functionally to ensure controls are deployed effectively and aligned to industry recognized frameworks.\nValidate that telemetry from each layer feeds the central analytics platforms and supports 360-degree visibility and appropriate attack surface coverage.\nMonitor control effectiveness and identify opportunities to improve visibility, coverage, and detection capabilities.\nParticipate in security assessments, control validation exercises, and purple-team activities.\nSupport remediation of identified security gaps, vulnerabilities, and control deficiencies.\nContribute technical recommendations regarding security tools, configurations, and operational improvements.\nAssist in maintaining complementary security capabilities to prevent bypasses and ensure failure of redundancy through all security layers.\nEndpoint Security & Hardening\nDeploy, configure, and administer EDR/XDR platforms.\nImplement and maintain endpoint and image hardening baselines, configuration standards, and application control baselines.\nMonitor endpoint telemetry and validate proper integration into the central analytics platform (or SIEM) to support security context and cross-domain correlation; ensure SIEM coverage is adequate and effective.\nCollaborate cross-functionally to ensure security events, exposures, vulnerabilities and alerts are remediated within appropriate SLA’s.\nInvestigate endpoint-based alerts and incidents through to root cause: perform triage, forensic artifact collection (memory, disk, logs), timeline reconstruction, and containment/eradication actions.\nThreat Hunting and Detection Engineering\nAnalyze security telemetry to surface anomalous and malicious behavior to the relevant stakeholders.\nExecute structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.\nDocument hunt hypotheses, outcomes and recommendations.\nAssist in investigation of identified vulnerabilities, zero-day, alert telemetry, threat intelligence feeds and notifications from partners and customers and conclude on exploitability risk and/or exposure.\nMaintain awareness of the evolving threat landscape, adversary TTP’s, and emerging vulnerabilities and their relevance to Relativity’s technical ecosystem and organizational trajectory.\nDevelop and tune detection rules, correlation logic, and alerting use cases within approved platforms.\nConvert successful hunts, exposure analysis, purple team findings and alerts into durable, automated detections and containment logic and improved coverage.\nAI-Enabled Security Operations\nBuild and maintain SOAR workflows that automate enrichment, triage, containment, and routine response actions.\nSupport implementation of SOAR playbooks and automated response capabilities and detection engineering.\nDevelop scripts and tooling using supported scripting languages such as Python, PowerShell, or Bash.\nMeasure and continuously improve the impact of automation on time-based detection, containment and response to reduce threat actor dwell time.\nAssist in evaluating and operationalizing AI/ML capabilities for semantic anomaly detection, behavioral analytics, alert triage, and prioritization.\nData Security\nSupport deployment and operation of data classification, discovery, and data security posture management across cloud and on-premises stores.\nDeploy and tune data loss prevention controls across endpoints, network, email, cloud and SaaS surfaces.\nAssist in integrating data-related telemetry into centralized monitoring and detection capabilities.\nMonitor data security alerts and investigate potential data protection concerns.\nInvestigate data key risk indicators associated with data access, exfiltration, and integrating data telemetry into central analytics (SIEM).\nVulnerability Management\nSupport vulnerability and exposure management programs through validation, prioritization, and remediation activities.\nAssist in identifying attack surface gaps across endpoint, identity, cloud, network, and data domains.\nValidate implementation of compensating controls and mitigation actions.\nParticipate in exposure assessments and attack surface analysis activities.\nContribute to risk-based prioritization and remediation recommendations.\nRequirements\nMinimum Qualifications:\nFamiliarity with enterprise security concepts across network, endpoint, identity, cloud, and data security domains.\nBasic knowledge of industry standard common security benchmarks and frameworks (e.g., MITRE, NIST, etc.).\nProficiency in at least one scripting/automation language (Python, Bash, or PowerShell) applied to modern containerized services, CLI based commands, and/or security specific use cases.\nExperience investigating security alerts, incidents, or suspicious activity.\nAbility to communicate technical findings clearly to both engineering peers and non-technical stakeholders.\nPreferred Qualifications:\nBachelor’s in Computer Science, Information Security, equivalent experience or security certification(s). (e.g., CompTIA Sec+, CompTIA Net+, ISC2 SSCP, etc...)\nBasic knowledge of common cloud environments such as AWS, Azure or GCP.\nHands-on experience in enterprise security engineering, with a focus on detection and response, red teaming, or ethical hacking.\nHands-on experience with common security tools such as EDR, XDR, SIEM, CNAPP, CSPM, CWP, etc. and intermediate knowledge of applicable security technologies at all layers of the OSI model.\nExposure to threat modeling, threat hunting, digital forensics, and/or detection engineering and writing automation scripts and rules for security enforcement and/or observability.\nFamiliarity with AI-enabled SecOps (e.g., detection: UEBA, ML-based alert prioritization, or AI-assisted threat hunting workflows).\nWorking knowledge of software development lifecycle, software engineering practices or infrastructure as code environments.\nExperience supporting compliance and audit requirements (SOC 2, ISO 27001, HIPAA) from a technical control perspective.\nRelativity is committed to competitive, fair, and equitable compensation practices.\nThis position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives.\nThe expected salary range for this role is betweenfollowing values:\n$90,000 and $134,000The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position.\nRequired Skills:\nCybersecurity, Cyber Threat Intelligence, Information Security, Intrusion Detection, Network Security, Security Architecture Design, Security Audit, Security Engineering, Security Operations, Vulnerability Management","description_format":"text","description_chars":7911,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Document Management","Legal AI","Legal Software"],"lifecycle":[{"event":"open","at":"2026-11-02T20:50:47Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":1,"expected_fill_days":49,"reasons":["conf:0","urgency","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":134000,"is_top_pay":false},"html_url":"https://alion.io/job/relativity-security-engineer","json_url":"https://alion.io/job/relativity-security-engineer.json","meta":{"generated_at":"2026-11-04T14:55:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22629,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2576},"rest":"https://alion.io/mcp/rest/get_company?id=2576"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frelativity-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frelativity-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frelativity-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/relativity-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frelativity-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3634714}},{"tool":"search_jobs","arguments":{"company":"relativity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3634714},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}