Security Operations Engineer

Runs Island's vulnerability and compliance scanning programme day to day as a Security Operations Engineer in the product security team, covering both commercial and FedRAMP environments. The engineer operates Burp Suite, Nessus and Sysdig scans on a schedule and for releases and audits, supports FedRAMP continuous monitoring in US GovCloud, triages findings and weeds out false positives, tracks remediation in Jira against SLAs, gathers NIST 800-53 audit evidence and automates scanning workflows, working with the SecOps Lead.

Island wants one to three years in security operations or IT security, hands-on use of at least one scanning tool, basic AWS and container knowledge, and ideally FedRAMP exposure. US citizenship is required, and the role is hybrid, four days a week at the Coppell, Texas headquarters.