Security engineering at LVT centers on building durable capabilities rather than performing manual operations. As an individual contributor on our security engineering team, you will own two critical domains: how we detect and respond to security events, and how exposure across our infrastructure, cloud, and endpoints is identified, prioritized, and remediated. You will build these systems as version-controlled code inside our Infrastructure and DevOps workflows, setting the technical bar and defining guardrails for LVT's internal AI ecosystem. This role reports to the Director of Security Engineering and participates in the security on-call rotation.

This role is based in-office out of our Headquarters in American Fork, Utah.

ROLE RESPONSIBILITIES

• Lead technical security incident response, driving both immediate containment and the engineering work required to prevent recurring incident classes.
• Build, maintain, and scale detections as code, aligned to a documented threat model and optimized for signal quality rather than alert volume.
• Own the logging and telemetry pipelines supporting detection and investigation, ensuring consistent coverage, quality, and retention across environments.
• Automate routine security operations workflows—including triage, enrichment, containment, and case management—to minimize manual overhead.
• Expand LVT’s security capabilities across EDR, DLP, and AI-assisted SOC tooling through code integrations, detection logic, and policy automation rather than console administration.
• Define and maintain visibility and technical guardrails for LVT's internal AI usage, including agent connectivity and AI-assisted development tools.
• Own exposure management end-to-end, delivering unified coverage across infrastructure, cloud, and endpoints prioritized by exploitability and reachability over raw scanner severity.
• Correlate vulnerability, cloud posture, and data loss findings into a single, prioritized backlog that partner engineering teams accept and execute against.
• Deliver measurable outcomes within 12 months: threat-mapped detections managed as code, automated response workflows, a reduced exposure baseline, and automated compliance evidence generation.

OUR IDEAL CANDIDATE

• 5+ years of experience engineering detection, response, and exposure systems, with deep expertise in security operations, incident response, or vulnerability management.
• Hands-on incident response experience leading technical investigations through containment and eradication, backed by a track record of implementing post-incident remediations.
• Proven experience in detection engineering and security data pipelines, including managing detections as code and operating SIEM or logging systems at scale.
• Strong software engineering skills in at least one language (such as Python or Go) alongside hands-on experience with infrastructure-as-code and CI/CD pipelines.
• Demonstrated ability to synthesize conflicting vulnerability findings into a single, clear risk model that software engineering teams trust and execute.
• Broad technical depth across cloud, host, and network security to distinguish actionable, exploitable threats from theoretical risks.
• High self-direction with the ability to operate effectively in ambiguous environments, decide technical priorities, and defend execution roadmaps.
• Strong written communication skills, capable of influencing peer engineers and raising team technical standards through clear, written technical arguments.
• Preferred experience: Incident command, risk prioritization frameworks (such as EPSS or attack-path analysis), policy-as-code, compliance automation (FedRAMP, SOC 2, or ISO 27001), or enterprise AI security controls.