{"id":457347,"url":"https://alion.io/job/stackline-security-automation-engineer","title":"Security Automation Engineer","company":{"id":10902,"name":"Stackline","domain":"stackline.com","url":"https://alion.io/company/stackline","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":6,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":140000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false},{"name":"Claude Code","optional":true},{"name":"Function Calling","optional":true},{"name":"Model Context Protocol","optional":true}],"status":"live","first_seen_at":"2026-09-03T22:44:41Z","employer_posted_date":"2026-09-03","last_verified_at":"2026-11-02T13:56:50Z","board_verified":true,"closed_at":null,"days_open":59,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":59},"description":"Stackline is the first full-funnel connected commerce platform for the world's most innovative brands. Business leaders, product innovators, performance marketers, and analysts trust Stackline as the single source of commerce truth. Fueled by our proprietary neural network, our market insights, revenue metrics, behavior analyses, and autonomous functionality create the actions that determine success or failure.\nFounded in 2014 in Seattle, we now have offices in Minneapolis, New York, Cleveland, and London. Since November 2020, Stackline has raised $180 million in strategic investments from Goldman Sachs Growth Equity and TA Associates.\nStackline is on a mission to fuel the future of commerce by bringing brands and customers closer together.\nAbout The Role\nThe Security Automation Engineer is a hands-on role responsible for Stackline's security posture, compliance program, and identity and endpoint platform. This covers a single Entra ID tenant, around a dozen federated applications, roughly 265 managed endpoints across macOS and Windows, and a SOC 2 Type II program tracked in Vanta with an external auditor.\nFor years, one generalist administrator ran this role - workable, but it revealed a limit: most of the week went to procedural work, running checklists and reconciling systems that disagree. That work has to be right but not done by hand. It needs a human to design it, and then to watch it run.\nThis role replaces that model with an engineer who automates the procedural half - evidence collection, offboarding, monitoring, and reconciliation - using scripts, services, and LLM agents. It builds on an existing internal repository of PowerShell and Python tooling, freeing capacity for the work that requires judgment: closing security gaps, hardening endpoints, driving vulnerability remediation, and carrying the compliance program.\nThe role splits roughly 40% security and compliance, 35% building automation, and 25% hands-on platform and deskside support. To support this on-site component, this position is based at our Seattle office 4 days per week.\nWhat You Will Do\nSecurity Posture and Compliance\nOwn the majority of Stackline's ~50 SOC 2 Type II controls in Vanta; route the rest to owners in Engineering, HR, Finance, and Legal.\nDrive vulnerability remediation to SLA - critical in 15 days, high in 30, medium in 90 - across endpoint findings.\nRun quarterly access reviews, the annual risk assessment, policy and vendor reassessment, and the leadership security council.\nCoordinate the annual penetration test and track findings to closure.\nOwn incident response for identity and endpoint compromise: investigate, contain, document.\nAutomation and Agents\nThis is the part of the job that makes the rest of it possible. You will identify the operational work that repeats and replace it with software that runs unattended and tells someone when it fails.\nExtend the nightly evidence-collection pipeline into a maintainable, company-owned system.\nAutomate employee offboarding to match the orchestration already in place for onboarding.\nBuild certificate and secret expiry monitoring across federated applications and app registrations.\nReconcile assets between the endpoint management platform and the ITSM system of record.\nAutomate ticket triage, first-response drafting, and knowledge retrieval against IT documentation.\nBuild with production rigor: scoped service identities, idempotent runs, structured logs, real failure alerts.\nIdentity and Endpoint Platform\nAdminister Microsoft Entra ID: conditional access, authentication methods, groups and role assignment, SAML/SCIM integrations, app registrations.\nAdminister Microsoft Intune across macOS and Windows: compliance policies, configuration profiles, application packaging and deployment, enrollment, Apple Business Manager.\nClose endpoint-hardening gaps: EDR on macOS, local administrator privilege management, centralized endpoint logging.\nFederate standalone-authenticating applications so disabling one account revokes everything.\nWhat We Are Looking For\nYou write real code. Production-quality Python or PowerShell, and the ability to read the other - not glue scripts you'd be embarrassed to hand over.\nDeep, hands-on identity experience. Entra ID or Azure AD at depth: conditional access, authentication methods, SAML/SCIM integrations, Graph API. Okta or Google Workspace depth works if you're ready to go deep on Entra quickly.\nEndpoint management at fleet scale. Intune or Jamf - configuration profiles, compliance policy, application packaging, enrollment, and what happens when a device falls out of compliance.\nYou've carried a compliance framework, not just survived one. SOC 2, ISO 27001, or similar, from the inside - you know the difference between a control that's documented and one that's operating.\nYou've built automation other people depended on. Scheduled jobs, API integrations, least-privilege service identities, and alerting for when it breaks at 3am.\nYou're comfortable being the whole function. No tier one beneath you, no second administrator beside you. You decide, document, and say plainly when something is above your line.\nYou'll be in the Seattle office 4 days per week. Parts of this job are physical and can't be done remotely.\nBachelor's degree in information technology, computer science, cybersecurity, or a related technical field, or an equivalent combination of education, certifications, and relevant professional experience.\nBonus Points If You Have\nShipped something real with LLM agents and tool use - Claude Code, MCP servers, or an agent framework - and can talk about what broke in production, not just what demoed well.\nmacOS security depth: endpoint detection, privilege management, unified logging.\nNetworking you've configured yourself: VLANs, dual-WAN failover, Meraki or UniFi.\nAutomated against an ITSM platform's API and hit the credential-scope wall everyone hits.\nIncident investigation: sign-in forensics, audit log analysis, mailbox rule and OAuth grant abuse.\nBenefits and Perks\nIt's important that each and every employee feels they are supported and can complete their life's best work today and in the future. As part of that, we are committed to doing our part in addressing pay gaps and discrepancies by providing pay transparency for all of our roles. Actual salaries are just one component of the compensation package and may vary above or below the range based on job-related knowledge, skills, experience, geographical location, and performance. The pay range for this position is $140,000 - $160,000 per year. Other rewards may include annual bonuses, short- and long-term incentives, and other team-specific awards. In addition, we provide a robust benefits and perks package that includes:\nComprehensive medical, dental, and vision coverage that actually supports you - including HSA with company match and FSA options\nFertility benefits to support your path to parenthood\n401(k) with company match to help you plan ahead\nCompany-paid life insurance\n20 days of PTO + 9 company holidays to truly unplug\nPaid parental leave for all parents - because family matters\nSummer Fridays (log off at 3pm and enjoy it)\nRegular in-office social events including happy hours and catered lunches\nA thoughtfully stocked kitchen with healthy snacks and fresh fruit\nStackline is committed to creating a diverse environment and is proud to be an equal opportunity employer. We encourage applicants from all backgrounds to apply. All qualified applicants will receive consideration for employment without regard to race, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.","description_format":"text","description_chars":7706,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual bonuses","Equity","Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","E-commerce Marketing"],"lifecycle":[{"event":"open","at":"2026-09-06T10:00:18Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.445,"p_room":0.35,"age_days":59,"expected_fill_days":28,"reasons":["conf:0","win:tail"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":160000,"is_top_pay":true},"html_url":"https://alion.io/job/stackline-security-automation-engineer","json_url":"https://alion.io/job/stackline-security-automation-engineer.json","meta":{"generated_at":"2026-11-02T15:07:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20913,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":10902},"rest":"https://alion.io/mcp/rest/get_company?id=10902"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstackline-security-automation-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstackline-security-automation-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstackline-security-automation-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stackline-security-automation-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstackline-security-automation-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":457347}},{"tool":"search_jobs","arguments":{"company":"stackline.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":457347},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}