{"id":3181074,"url":"https://alion.io/job/the-weather-group-security-engineer-2","title":"Security Engineer","company":{"id":1770135,"name":"The Weather Group","domain":"weathergroup.com","url":"https://alion.io/company/weathergroup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":108000,"max_usd":206000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"Gmail","optional":false},{"name":"Google Workspace","optional":false},{"name":"NIST CSF","optional":false},{"name":"Okta","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-10-23T21:33:50Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-27T13:45:29Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Security Engineer - GRC, Cloud, Workspace & IdAM\nReports to:Director, Systems Operations & Cybersecurity\nLocation:Atlanta / Hybrid\nPosition Summary\nThis role runs programs that most organizations staff separately: governance and compliance, cloud, SaaS, Identity and Access Management security posture, and the assessment cycle that tests them all.\nIt is an individual contributor role with program ownership. There are no direct reports, and nearly everything that needs to change is owned by someone else - a cloud engineer, an application owner, a business-unit administrator. The work is therefore split between doing (assessing, documenting, evidencing, configuring) and driving (getting findings closed by people who do not report here).\nThe Director owns policy approval, budget, vendor contracts, and executive reporting. This role owns the programs running, the findings closing, and the evidence being ready before it is asked for.\nKey Responsibilities\nGovernance, Risk & Compliance\nMaintain the security policy and standards library - drafting, revision cycles, approvals, publication, and attestation tracking.\n\nOwn the risk register day to day: intake, scoring, treatment plans, owner assignment, and review cadence.\n\nMap controls to the applicable framework(s) - NIST CSF / CIS Controls / SOC 2 / PCI DSS.\n\nRun exception and risk-acceptance governance: documented, time-bound, owned, and reviewed on expiry rather than renewed by silence.\n\nOwn third-party and vendor risk reviews, including pre-contract security assessment and periodic reassessment of critical suppliers.\n\nComplete customer and partner security questionnaires; assemble evidence packages for audits, insurers, and M&A due diligence.\n\nIdentity & Access Management (IdAM)\nImplement, support, and troubleshoot Identity and Access Management (IdAM) and Privileged Access Management (PAM) solutions.\n\nAdminister and maintain identity security platforms and directories (e.g., Okta, Password Safe).\n\nDesign and enforce secure remote access.\n\nPartner with the identity team on SSO coverage and lifecycle so SaaS access follows the joiner/mover/leaver process rather than around it.\n\nGoogle Workspace & SaaS Security\nOwn the security configuration of Google Workspace: admin console hardening, context-aware access, 2SV enforcement, Drive external sharing controls, Gmail threat protection and routing rules, DLP policies.\n\nGovern third-party OAuth application access - review, approve, restrict, and periodically re-review what has been granted access to corporate data.\n\nMonitor Workspace alert center and audit logs; investigate and escalate anomalous access, sharing, and configuration change.\n\nExtend the same discipline to the broader SaaS estate: inventory sanctioned applications, review security configuration at onboarding, and identify shadow IT.\n\nCloud Security\nOperate the cloud security posture platform (Wiz) across GCP/AWS/Azure: coverage, policy tuning, and triage of misconfigurations, exposed workloads, and toxic combinations.\n\nRoute findings to the accountable engineering owner with enough context to act, and track them to closure against defined SLAs.\n\nReview cloud IdAM configuration - over-permissive roles, standing access, unused credentials, key hygiene.\n\nContribute cloud security requirements to new architecture and provide secure-by-default baselines that teams can adopt without a consultation.\n\nPartner with the network and endpoint security functions on shared telemetry, logging coverage, and detection gaps.\n\nSecurity Assessments\nPlan and execute recurring internal security assessments against the control framework.\n\nCoordinate third-party penetration tests and external audits: scoping, scheduling, access, evidence, and readout.\n\nOwn the finding lifecycle end to end - validation, owner assignment, remediation tracking, retest, and closure. A finding is not closed because it was assigned.\n\nMaintain a single consolidated view of open findings across all sources (pen test, audit, cloud posture, vulnerability scanning, assessments) so remediation is prioritized once, not five times.\n\nSupport security awareness programs and phishing simulation where they intersect with control requirements.\n\nCommunication\nWrite clearly and for the audience. Policy, findings, risk narratives, and evidence summaries are the primary output of this role - writing quality is a core requirement, not a soft skill.\n\nExplain a finding in terms of business impact and required action, not tool output. An engineer should be able to read the ticket and act without a meeting.\n\nGive the Director an accurate picture without prompting - what is closing, what is stuck, what needs escalation or a risk decision.\n\nPresent assessment and compliance status to stakeholders across the business units at a defined cadence, showing trend and decision rather than raw counts.\n\nOwnership & Accountability\nThis is stated explicitly because it is the primary filter for this role. The successful candidate:\nOwns the outcome, not the ticket. Nearly every fix belongs to someone else - driving it to closure still belongs here.\n\nFollows up without being reminded, and escalates with a recommendation when follow-up stops working.\n\nVerifies rather than assumes. Remediation is confirmed by retest, not by an email saying it was handled.\n\nKeeps the evidence current continuously, so audits and insurance renewals are a retrieval exercise rather than a fire drill.\n\nRaises the uncomfortable finding, including when it lands on an internal team or a senior stakeholder.\n\nRequired Qualifications\n5+ years in information security, with demonstrated ownership of a GRC program or a substantial portion of one.\n\nTechnical knowledge in designing and implementing Identity & Access Management (IdAM) and Privileged Access Management solutions.\n\nHands-on experience with cloud security posture management (Wiz or comparable tool) and practical understanding of cloud IdAM and misconfiguration risk in at least one major provider.\n\nAdministration or security-configuration experience with Google Workspace (or comparable enterprise SaaS suite), including sharing controls, DLP, and OAuth app governance.\n\nExperience running or supporting security assessments, audits, and penetration tests, including evidence production and remediation tracking.\n\nWorking knowledge of at least one control framework - NIST CSF, CIS Controls, SOC 2, or PCI DSS - applied in a real environment rather than studied.\n\nDemonstrated ability to drive remediation through teams that do not report to you.\n\nStrong technical writing. Candidates should expect to provide a writing sample.\n\nBachelor's degree or equivalent practical experience.\n\nPreferred\nCISSP, CISA, CCSK, CISM, or cloud provider security certification.\n\nExperience administering and maintaining security platforms such as Okta, Password Safe, Crowdstrike, Wiz, Palo Alto XSIAM, and ExtraHop.\n\nScripting for evidence collection and reporting automation (Python, PowerShell, or equivalent).\n\nExperience with cyber insurance underwriting questionnaires or M&A technology due diligence.\n\nExperience in media, broadcast, or another 24x7 operational environment.\n\nFamiliarity with vulnerability management and endpoint security tooling (CrowdStrike) as a consumer of their output.\n\nFirst-Year Success Measures\n\nTimeframe\nExpected Outcome\n90 days\nPolicy library and risk register inventoried and current-state assessed; Wiz, Workspace, and IdAM configurations baselined against benchmark; consolidated open-findings view established; relationships built with each remediation owner.\n6 months\nControl framework crosswalk complete and evidence mapped; exception governance running with dated, owned entries; cloud, Workspace, and identity findings closing against SLA with measurable backlog reduction; third-party risk review process operating at onboarding.\n12 months\nAudit, questionnaire, and insurance evidence produced on request without a scramble; at least one full internal assessment cycle and one external test completed with findings closed or formally accepted; measurable reduction in external Drive exposure and over-permissive cloud/IdAM roles; risk register reviewed in a standing governance forum with business participation.\nWorking Conditions\nOccasional participation in incident response and after-hours escalation.\n\nPeriods of elevated workload around audit, assessment, and insurance renewal cycles.\n\nOccasional travel to sites/facilities.\n\nHybrid/Atlanta office onsite expectations.\n\nAllen Media Group is an equal opportunity employer and is committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, national origin, gender, gender identity, sexual orientation, age, disability, religion, veteran status, or any other protected characteristic. All qualified applicants will receive consideration for employment without regard to these characteristics. We are dedicated to providing a workplace free from harassment and discrimination.","description_format":"text","description_chars":9020,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Media & Entertainment","TV Production"],"lifecycle":[{"event":"open","at":"2026-10-23T21:33:50Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":35,"reasons":["conf:4","velocity","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/the-weather-group-security-engineer-2","json_url":"https://alion.io/job/the-weather-group-security-engineer-2.json","meta":{"generated_at":"2026-10-27T18:08:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7966,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1770135},"rest":"https://alion.io/mcp/rest/get_company?id=1770135"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-weather-group-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-weather-group-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-weather-group-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-weather-group-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-weather-group-security-engineer-2"}]}