{"id":3885996,"url":"https://alion.io/job/rta-fleet-senior-security-engineer","title":"Senior Security Engineer","company":{"id":1830411,"name":"RTA Fleet","domain":"rtafleet.com","url":"https://alion.io/company/rtafleet","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":160000,"max":185000,"currency":"USD","period":"year","gross":null,"usd_annual":185000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Auth0","optional":false},{"name":"AWS","optional":false},{"name":"Cloudflare","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Falcon","optional":false},{"name":"FedRAMP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false},{"name":"Agentic Workflows","optional":true},{"name":"AI Agents","optional":true},{"name":"CI/CD","optional":true},{"name":"CloudFormation","optional":true},{"name":"Harbor","optional":true},{"name":"HIPAA","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-06T19:26:07Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T01:43:02Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nDo you see threats where others see business as usual, and love turning that instinct into real defenses? Do you read a CrowdStrike detection, a GuardDuty finding, and a vulnerability scan report and already know which one matters most? Have you made AI a real part of how you do security? We mean a tool you use every day to triage faster, cut noise, and spend your time on the work only a human can do, not a buzzword on your resume. If so, read on…\nRTA is looking for a Senior Security Engineer to protect every layer of our tech stack and culture. Our Fleet360 platform is a multi-tenant SaaS on AWS. Hundreds of fleets rely on it, including cities, counties, school districts, transit agencies, and public safety organizations. Those customers expect government-grade security, and we're building toward it.\nYou'll report to the Director, Support Engineering and work alongside our Cloud, Systems, and Database Engineers, partnering with teams across the company to keep our customers' fleets, and our reputation, safe.\nThis isn't a \"watch the dashboard and forward the alert\" role. You'll be a hands-on security engineer who identifies risks, builds practical solutions, and helps strengthen RTA's security posture. One day you might be improving an incident response process, and the next building an AI-assisted triage workflow or advancing our compliance readiness.\nThis role is not for everyone. If you prefer clearly defined tasks handed to you one at a time, this may not be your seat. We're looking for someone who sees an undefined security problem, takes ownership, and brings a thoughtful plan to solve it.\nYour Top 3 Objectives & Measures of Success\nStrengthen RTA's Security Posture\nProactively identify, prioritize, and remediate security risks across our AWS infrastructure, endpoints, applications, and identity systems. Build sustainable security practices that reduce exposure and improve our ability to detect and respond to threats.\nMeasures of Success:\nCritical and High vulnerabilities are identified, prioritized, and tracked through resolution.\nCritical vulnerabilities are remediated within 7 days and High vulnerabilities within 30 days, or have documented, approved risk exceptions.\nSecurity incidents are promptly escalated, appropriately contained, and documented with clear root cause analysis and follow-up actions.\nCloud, endpoint, and identity security configurations are regularly reviewed and improved, with measurable progress against established security baselines.\n2. Drive Compliance and Audit Readiness\nMaintain RTA's SOC 2 Type II readiness while advancing our GovRAMP/FedRAMP security roadmap. Partner across the organization to implement controls, manage risks, and maintain the documentation and evidence needed to demonstrate compliance.\nMeasures of Success:\nAssigned SOC 2 controls are maintained, tested, and supported by current, accurate evidence.\nWithin the first 90 days, complete a security gap assessment and establish a prioritized GovRAMP/FedRAMP readiness roadmap with leadership.\nCompliance gaps, risks, and remediation activities are documented, assigned, and tracked against agreed-upon timelines.\nAnnual audit activities are completed on schedule, with minimal last-minute evidence collection or avoidable findings.\n3. Scale Security Through AI and Automation\nUse AI and automation to improve the speed, consistency, and effectiveness of security operations while ensuring the tools and workflows themselves are secure.\nMeasures of Success:\nWithin the first 6 months, implement at least two production-ready security automations that reduce manual effort or improve detection, investigation, or remediation.\nDemonstrate measurable improvements in efficiency through reduced manual processing, faster triage, or improved workflow consistency.\nEstablish appropriate guardrails for AI-enabled security workflows, including data handling, access controls, and human oversight.\nIdentify and continuously improve opportunities to integrate security into existing engineering and business processes.\nWhat You'll Actually Own\nProtect & Detect\nRun and tune CrowdStrike Falcon, AWS GuardDuty, CloudTrail, and our managed SOC/MDR pipeline.\nMonitor detections, sensor health, prevention policies, and escalations, partnering with our 24x7 managed security provider to investigate and resolve threats.\nImprove detection quality and reduce unnecessary alerts through tuning and automation.\nHunt & Fix\nOwn the vulnerability management process across cloud, endpoint, and applicable on-premises assets.\nManage Qualys or equivalent scanning, risk-based prioritization, remediation tracking, and verification.\nCoordinate with Engineering and IT teams responsible for implementing fixes, and document approved exceptions in the Risk Register.\nCoordinate Patch Tuesday reviews and annual external penetration testing.\nAutomate & Integrate\nIntegrate Snyk or similar SAST, DAST, SCA, and container security scanning into GitHub Actions and development workflows.\nPartner with developers to identify and address security issues before deployment.\nBuild practical AI-assisted workflows for alert triage, scan analysis, remediation guidance, and evidence collection.\nChampion security as code and repeatable, scalable processes.\nComply & Certify\nCoordinate the technical security activities supporting RTA's annual SOC 2 Type II audit.\nAdvance GovRAMP/FedRAMP readiness through NIST SP 800-53 controls mapping, gap remediation, evidence management, and POA&M tracking.\nPartner with control owners and leadership to maintain audit readiness throughout the year.\nRespond & Recover\nCoordinate security incident response activities, including investigation, containment, recovery, root cause analysis, and documentation.\nWork with the managed SOC/MDR provider and internal stakeholders to ensure clear escalation and accountability.\nMaintain and test incident response plans and participate in tabletop exercises.\nGovern & Guide\nDevelop and maintain practical security policies, procedures, and playbooks.\nStrengthen identity and access security across Microsoft Entra ID SSO, Cloudflare Zero Trust, Auth0, and least-privilege IAM.\nMaintain an actionable security Risk Register and communicate material risks and recommendations to leadership.\nHelp establish appropriate security guardrails for company AI adoption, including data protection, vendor risk, and prompt injection awareness.\nSupport Our Customers & Teams\nLead technical security responses for customer questionnaires, RFPs, HECVAT assessments, and vendor due-diligence requests.\nSupport security awareness initiatives, including monthly training and employee education.\nServe as a security subject matter expert and mentor to technical teams, sharing best practices and helping build security knowledge and capabilities across the organization.\nPartner with Product, Engineering, Support, and other departments to make security a shared responsibility.\nTranslate complex security risks into clear, actionable recommendations for technical and nontechnical audiences.\nWhat We're Looking For\nIn general, someone who:\nIs a service-minded protector who measures success by how secure, and how empowered, others feel.\nHas truly adopted AI into how they work. You use AI tools to improve productivity, automate repetitive work, and solve problems while understanding where human judgment and security safeguards matter most.\nIs comfortable with healthy conflict and constructive feedback. You can challenge ideas respectfully, welcome different perspectives, and work toward the best outcome for the team.\nIs Humble, Hungry, and Smart. Patrick Lencioni fans earn bonus points.\nPassionately cares about our clients. They are fleet managers, parts clerks, and technicians maintaining everything from squad cars to school buses, so everyone comes home safely at the end of the day.\nTakes ownership and initiative. You surface problems before you're asked and bring a plan with them.\nBelieves no job is beneath them. If something needs doing, you roll up your sleeves and help.\nSpecifically for This Job, Someone Who:\nHas 5+ years of experience in security engineering, cloud security, or a closely related field.\nHas a proven track record securing AWS workloads, including VPCs, Security Groups, IAM, GuardDuty, CloudTrail, KMS, and Secrets Manager.\nHas hands-on experience with EDR platforms (CrowdStrike preferred), vulnerability management (Qualys or similar), SIEM/MDR operations, and application security scanning (Snyk or similar).\nUnderstands modern DevOps and CI/CD security practices, including GitHub Actions and automated security testing.\nHas working knowledge of SOC 2 Type II and NIST SP 800-53. GovRAMP or FedRAMP experience is a strong plus.\nHas practical experience using AI tools to improve security or technical workflows, with sound judgment about data protection and risk.\nCan write scripts using Python, PowerShell, or Bash to automate security processes.\nUnderstands identity and access management, least-privilege principles, and modern Zero Trust practices.\nCan independently manage projects, prioritize competing security risks, and coordinate work across teams.\nCommunicates clearly and confidently with engineers, executives, auditors, and customers.\nBonus Points (Preferred Certifications & Skills)\nCertifications such as CISSP, CISM, CCSP, OSCP, Security+, AWS Security Specialty, or other AWS certifications.\nExperience with CJIS, public-sector security requirements, or regulated environments such as PCI or HIPAA.\nExperience with Terraform/CloudFormation, Cloudflare Zero Trust, Microsoft Entra ID, or Kubernetes RBAC.\nExperience securing AI/LLM integrations or building AI-powered security automation, including agentic workflows and MCP-connected tools.\nThe Bottom Line\nWe want an ideal team player with an almost frightening intensity around customer service, a passion for protecting others, and the technical ability to make security stronger, smarter, and more scalable.\nYou'll have the opportunity to make a meaningful impact on RTA's security posture, help advance our compliance journey, and define what AI-augmented security engineering looks like in a growing SaaS company.\nIf you're ready to keep RTA's mission rolling safely, and have some fun doing it, we'd love to hear from you!\nTotal compensation for the role is competitive and depends on experience. This is a full-time, fully remote U.S. role, with occasional travel to our Glendale, Arizona headquarters for team gatherings and other business needs.\nCompensation & Work Location\nThe anticipated salary range for this role is $160,000-$185,000 annually, depending on experience, skills, and qualifications.\nThis is a full-time, fully remote-eligible role for candidates located in the United States.\nOccasional visits to RTA HQ in Glendale, Arizona for team meetings and events should be expected.\nTravel is expected to be minimal, generally up to 10% based on business needs.\nThis position is classified as exempt and is not eligible for overtime pay.\nWhy Top Talent Chooses RTA\nWe invest in our people - period.\n401(k) with 6% Safe Harbor match (100% vested day one)\nFlexible PTO model built on trust and manager-approved time off\nCigna PPO and HSA medical plan options with company contributions ($780-$1,950 annually)\nGarner Health HRA program: up to $1,000 individual / $2,000 family reimbursement opportunity\nWellness rewards up to $350 annually\nVirtual care and mental health support resources\nCompany-sponsored benefits including dental, vision, EAP, life, STD, LTD, legal plan, and identity theft protection options\nAdditional employee perks, wellness initiatives, and discount programs\nThe Part We're Most Proud Of\n#34 on the Fortune Best Small Workplaces™ 2026 list\n99% of employees say RTA is a Great Place to Work® - Certified three years running\n30% ARR growth - two years straight\nWe're an AI-forward company building for the future\nMeaningful work supporting the fleets and peopl...","description_format":"text","description_chars":15671,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Fleet Management"],"lifecycle":[{"event":"open","at":"2026-11-06T19:37:28Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:4","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":185000,"is_top_pay":true},"html_url":"https://alion.io/job/rta-fleet-senior-security-engineer","json_url":"https://alion.io/job/rta-fleet-senior-security-engineer.json","meta":{"generated_at":"2026-11-08T04:27:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9624,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1830411},"rest":"https://alion.io/mcp/rest/get_company?id=1830411"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frta-fleet-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frta-fleet-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frta-fleet-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rta-fleet-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frta-fleet-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3885996}},{"tool":"search_jobs","arguments":{"company":"rtafleet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3885996},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}