{"id":1982814,"url":"https://alion.io/job/snap-on-senior-security-infrastructure-engineer","title":"Senior Security & Infrastructure Engineer","company":{"id":1808866,"name":"Snap-on","domain":"snapon.com","url":"https://alion.io/company/snapon-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tustin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":145000,"max":165000,"currency":"USD","period":"year","gross":null,"usd_annual":165000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"FedRAMP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false},{"name":"Crowdstrike","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Nessus","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"SOC 2","optional":true},{"name":"Splunk","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-07T00:38:47Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-12T03:17:27Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Overview\nAutoCrib is the leader in industrial vending technology. We design and create all the software and hardware in-house to help manage inventory for our customers. Our industry is vast; customers range from manufacturing to government to retail to data centers. We are a growing company that is looking for candidates who are looking for a challenge and like to wear a lot of hats. AutoCrib is big enough to provide the resources you need, but small enough to still feel like a family. We believe in giving employees autonomy to make their own decisions and actively help them with their career path. Our benefits include healthcare, 401k, life insurance, and PTO.\nWe are seeking a hands-on Senior Security & Infrastructure Engineer to own and mature the organization's cybersecurity program while supporting the security, reliability, and compliance of our mission-critical SaaS platform and corporate infrastructure.\nThis role serves as the primary technical security resource for the organization and is responsible for security operations, vulnerability management, incident response, infrastructure hardening, identity security, compliance initiatives, and cloud security governance. The ideal candidate combines strong cybersecurity expertise with practical infrastructure experience and can effectively partner with Engineering, DevOps, and IT teams to reduce risk while enabling business growth.\nThis position is ideal for an experienced security professional who enjoys working across multiple technology domains and wants to have a direct impact on the organization's overall security posture.\nResponsibilities\nSecurity Operations & Monitoring\nOwn and administer enterprise security tools, including SIEM, EDR, vulnerability management, email security, and security monitoring platforms.\nMonitor, investigate, and respond to security alerts and incidents.\nDevelop and maintain detection rules, dashboards, and alerting strategies.\nConduct proactive threat hunting and security investigations.\nCoordinate third-party penetration testing and security assessments\nMaintain security metrics, reporting, and executive-level visibility into organizational risk.\nVulnerability & Risk Management\nOwn and manage the enterprise vulnerability management program.\nPerform vulnerability scanning across infrastructure, operating systems, cloud services, applications, and security monitoring platforms.\nPrioritize remediation efforts based on business impact and risk.\nTrack remediation activities and communicate status to leadership.\nValidate remediation efforts and drive continuous improvement.\nMaintain risk registers and support organizational risk assessments.\nIncident Response & Security Engineering\nLead security incident response activities including containment, eradication, recovery, and lessons learned.\nDevelop and maintain incident response procedures and playbooks.\nPerform root cause analysis and coordinate post-incident reviews.\nSupport forensic investigations and evidence collection.\nPartner with internal and external stakeholders during security events.\nImprove detection, response, and recovery capabilities across the organization.\nInfrastructure & Platform Security\nSecure and harden Windows Server, Linux, virtualization platforms, databases, storage systems, and enterprise applications\nReview and maintain firewall configurations, VPNs, remote access solutions, and network security\nSupport network segmentation and Zero Trust initiatives.\nImplement security baselines aligned with CIS Benchmarks and industry best\nParticipate in infrastructure architecture reviews and technology evaluations\nValidate backup, disaster recovery, and ransomware recovery readiness.\nCloud Security\nIdentity & Access Management\nAdminister and secure Active Directory and Microsoft Entra ID\nImplement least-privilege access controls and role-based access management.\nManage privileged access, service accounts, and identity governance processes.\nConduct periodic access reviews and entitlement audits.\nSupport MFA, Conditional Access, and identity security initiatives\nCompliance & Governance\nSupport and lead security initiatives aligned with NIST, FedRAMP, CMMC, FISMA, and other applicable frameworks.\nDevelop and maintain policies, standards, procedures, SSPs, POA&Ms, and security reviews.\nCoordinate technical evidence collection for audits and assessments.\nParticipate in risk assessments and security reviews.\nDrive continuous monitoring and compliance activities\nServe as the primary technical security resource during audits and customer security reviews.\nCustomer & Vendor Security\nSupport customer security questionnaires, audits, and due diligence reviews.\nParticipate in customer-facing security discussions as needed.\nPerform security reviews of third-party vendors, suppliers, and service providers.\nAssist with security-related contractual and compliance requirements.\nAutomation & Continuous Improvement\nDevelop scripts and automation to improve security operations and reporting.\nSupport integration of security controls into CI/CD and operational workflows.\nEvaluate new technologies and recommend security improvements.\nPromote secure engineering and operational best practices across the organization.\nQualifications\nQualifications and Education Requirements\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent\nexperience.\n5+ years of experience in Security Engineering, Infrastructure Security, Cybersecurity Operations, or a related\nExperience administering SIEM, EDR, and vulnerability management platforms.\nExperience leading or participating in incident response investigations.\nStrong understanding of networking, firewalls, VPNs, and security architecture.\nExperience securing Windows Server, Linux, Active Directory, Microsoft Entra ID, and virtualized environments.\nExperience managing cloud environments, preferably Microsoft Azure.\nStrong understanding of vulnerability management and risk mitigation practices.\nExperience with NIST Cybersecurity Framework and related security controls.\nExperience with PowerShell, Python, Bash, or other scripting languages.\nStrong written, verbal, and executive communication skills.\nNice to Have\nExperience supporting FedRAMP, CMMC, FISMA, SOC 2, or similar compliance frameworks.\nExperience with Microsoft Sentinel, Microsoft Defender, CrowdStrike, Splunk, Tenable, Nessus, Qualys, or equivalent platforms.\nExperience implementing CIS Benchmarks or DISA\nExperience supporting SaaS environments and cloud-hosted\nExperience with Infrastructure-as-Code solutions such as Terraform or\nProfessional certifications such as CISSP, Security+, GSEC, GCIA, Azure Security Engineer, or equivalent.\nSalary: $145,000-$165,000","description_format":"text","description_chars":6749,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Corporate Training","Information Security","Health & Medical Electronics"],"lifecycle":[{"event":"open","at":"2026-10-07T00:38:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 1","filings_12m":0,"filings_prev_12m":5,"green_card_filings_12m":1,"median_offered_wage_usd":147500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.795,"p_room":0.9,"age_days":3,"expected_fill_days":5,"reasons":["conf:0","velocity","win:mid","comp:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":{"stated_usd_annual":165000,"is_top_pay":true},"html_url":"https://alion.io/job/snap-on-senior-security-infrastructure-engineer","json_url":"https://alion.io/job/snap-on-senior-security-infrastructure-engineer.json","meta":{"generated_at":"2026-10-12T06:09:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9841,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1808866},"rest":"https://alion.io/mcp/rest/get_company?id=1808866"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsnap-on-senior-security-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsnap-on-senior-security-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsnap-on-senior-security-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/snap-on-senior-security-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsnap-on-senior-security-infrastructure-engineer"}]}