{"id":3404804,"url":"https://alion.io/job/worth-ai-it-security-engineer-3","title":"IT Security Engineer","company":{"id":4923,"name":"Worth AI","domain":"worthai.com","url":"https://alion.io/company/worth-ai","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Orlando, United States","Atlanta, United States","Tampa, United States","Miami, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":92000,"max_usd":210000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linear","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wiz","optional":false}],"status":"closed","first_seen_at":"2026-10-28T15:49:53Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-02T18:17:55Z","board_verified":false,"closed_at":"2026-11-02T18:17:55Z","days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"At Worth AI, we're building technology that transforms how financial decisions are made and we're doing it with precision, security, and speed. As we scale, we're looking for a hands-on Security Engineer to strengthen our vulnerability management program, harden our AWS environment, and help build application security into how we ship software.\nThis role is project-driven: you'll own initiatives end to end, from scoping a remediation effort to rolling out a new control, while also handling day-to-day security tickets against defined SLAs. You'll work closely with engineering, IT, and compliance, so clear communication and follow-through matter as much as technical depth.\nResponsibilities\nVulnerability Management (Primary Focus)\nOwn the vulnerability scanning program across endpoints, servers, and cloud infrastructure\nTriage, prioritize, and track findings through remediation, partnering with engineering and IT owners\nMonitor and report on remediation SLAs; escalate aging or high-severity findings\nMaintain vulnerability management documentation, metrics, and recurring reporting\nIdentity Management\nImprove our identity management program through improvements in configurations, automations, to simultaneously improve security and user experience.\nCloud Security (AWS)\nMonitor and harden AWS environments: IAM, security groups, S3, CloudTrail, GuardDuty, Security Hub, Config\nImplement and maintain security guardrails and baseline configurations across AWS accounts\nInvestigate and respond to cloud security alerts and incidents\nSupport least-privilege access reviews and cloud configuration audits\nApplication Security\nSupport SAST, DAST, and dependency/SCA scanning integrated into the CI/CD pipeline\nReview and triage AppSec findings with engineering teams and track remediation to closure\nParticipate in secure code reviews and threat modeling for new features and services\nHelp maintain secure development guidelines and AppSec tooling\nSecurity Operations & Ticketing\nTriage and resolve security tickets and requests within defined SLAs\nTake ownership of incidents and requests through to resolution, escalating when needed\nMaintain clear, accurate documentation of decisions, incidents, and remediation status\nProject & Cross-Functional Work\nLead or contribute to security initiatives - tooling rollouts, control implementations, audit and compliance prep\nCollaborate with engineering, IT, and compliance to embed security into everyday workflows\nCommunicate risk, status, and trade-offs clearly to both technical and non-technical stakeholders\nRequirements\n2-4 years of experience in a security engineering, security analyst, or related role\nHands-on experience with AWS security services and concepts (IAM, VPC, GuardDuty, Security Hub,\nCloudTrail)\nPractical experience with vulnerability management tools and remediation workflows\nWorking knowledge of application security concepts (OWASP Top 10, SAST/DAST, dependency scanning)\nExperience managing a ticket queue against SLAs, with strong ownership and follow-through\nStrong written and verbal communication skills; comfortable working cross-functionally\nSolid analytical and troubleshooting skills, with the ability to prioritize under competing deadlines\nPreferred\nAWS certification (Security Specialty or equivalent)\nExperience with tools such as Wiz, Tenable, Qualys, or Snyk\nScripting experience (Python or bash) for automation and tooling\nExposure to compliance frameworks such as SOC 2\nExperience with Jira, Linear, or similar ticketing/project tools\nAdditional Requirements\nComfortable working in-office 3 days per week\nAble to work independently as a self-starter while collaborating across teams\nWilling to participate in on-call or escalation coverage as needed\nBenefits\nHealth Care Plan (Medical, Dental & Vision)\nRetirement Plan (401k, IRA)\nLife Insurance \nFlexible Paid Time Off \n9 paid Holidays \nFamily Leave \nRemote\nHybrid work (for Orlando Associates)\nFree Food & Snacks (Orlando)\nWellness Resources","description_format":"text","description_chars":3992,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work","Life insurance","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","RegTech, AML & Compliance","Financial AI"],"lifecycle":[{"event":"open","at":"2026-10-28T15:49:53Z"},{"event":"close","at":"2026-11-02T18:17:55Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/worth-ai-it-security-engineer-3","json_url":"https://alion.io/job/worth-ai-it-security-engineer-3.json","meta":{"generated_at":"2026-11-04T12:12:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18344,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4923},"rest":"https://alion.io/mcp/rest/get_company?id=4923"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fworth-ai-it-security-engineer-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fworth-ai-it-security-engineer-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fworth-ai-it-security-engineer-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/worth-ai-it-security-engineer-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fworth-ai-it-security-engineer-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3404804}},{"tool":"search_jobs","arguments":{"company":"worthai.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3404804},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}