About the Role

We're hiring a hands-on Security Analyst to own the day-to-day of our security program across endpoints, cloud, and identity. You'll monitor, investigate, and respond to threats while serving as the first point of contact for employees with security questions. This role has real ownership. You'll operate within established guidelines with appropriate oversight, but the day-to-day security operations are yours to run. We're looking for someone who takes that seriously, someone who can distinguish signal from noise, escalate when it counts, and handle their domain with consistency and care. We're a technical team that moves fast and expects its people to keep up. We want someone who is genuinely curious about how things work, stays current without being told to, and brings ideas rather than waiting for them.

What You'll Do

Daily & Weekly

• Monitor and triage Microsoft Defender alerts across endpoints, identity, and cloud
• Review Intune/MDM compliance dashboards, validate endpoint patch status, and follow up on non-compliant devices
• Monitor Azure Defender for Cloud, Azure Policy, and Entra ID for anomalous activity
• Handle front-line employee security questions and requests

Monthly

• Review access to protected systems and validate permissions remain appropriate
• Perform abuse screening per established runbook
• Execute web application security scans and document findings
• Verify Conditional Access policies are operating as configured and investigate any drift
• Review and adjust web filtering rules and endpoint traffic controls
• Prepare security metrics reports for leadership
• Surface process and tooling improvements to your manager

Quarterly

• Coordinate vulnerability scanning with our third-party security partner; triage results, brief Engineering on findings, and drive remediation to closure within SLA
• Support compliance evidence collection per compliance team direction

Annually

• Own coordination of our penetration test: scoping, scheduling, stakeholder liaison, and remediation tracking
• Support the annual audit evidence collection process

Required Qualifications

• 3–5 years in a hands-on security operations role across real enterprise environments
• Demonstrated experience across the Microsoft Defender suite: Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Cloud
• Working knowledge of Intune/MDM for endpoint compliance
• Experience with Azure security services: Azure Policy and Entra ID (Conditional Access, PIM, audit logs)
• Familiarity with GitHub Actions and/or Azure DevOps
• Experience supporting compliance programs - executing control tasks and contributing to evidence collection
• Strong collaborator - someone peers and stakeholders can rely on
• Genuinely curious - you follow threads, ask why, and don't stop at the surface

 Education
We prefer a Bachelor's degree in a technical field but will seriously consider candidates with an Associate's degree, relevant certifications, or equivalent hands-on experience. Military cybersecurity experience is highly valued.

Preferred Qualifications

• Microsoft certifications: SC-200, SC-300, AZ-500
• Experience with web application security scanning tools
• PowerShell or Python for log analysis and automation

Work Environment

You'll be the dedicated security analyst on an eight-person technical team, working closely with the compliance team, Engineering, IT, and our external security partners. Occasional availability outside business hours for security incidents is expected.

WHO WE ARE:  

Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit aviatrix.ai. 

ABOUT THE ROLE:

We are looking for a seasoned Senior DevOps Engineer to join our team and take ownership of our CI/CD ecosystem, cloud infrastructure automation, and developer platform. This is a journey-level, fully qualified position where you will independently design and drive solutions across complex, diverse projects — bringing both technical depth and collaborative leadership to everything you do.

You will work at the intersection of infrastructure engineering, AI-driven tooling, and modern cloud operations, partnering closely with development and TechOps teams to accelerate delivery cycles and ensure the reliability, security, and scalability of our systems.

Key Responsibilities:

• Design, implement, and maintain robust, scalable CI/CD pipelines across multiple environments, applying industry best practices to optimize delivery speed and system reliability.
• Automate the provisioning and lifecycle management of cloud resources (VMs, EC2, and more) using Infrastructure as Code — with Terraform as the primary tool — ensuring consistent, repeatable, and auditable deployments.
• Manage and optimize cloud networking configurations, supporting complex developer workflows and infrastructure scalability requirements.
• Integrate AI and large language model (LLM) capabilities into DevOps tooling and developer workflows, including leveraging Model Context Protocol (MCP) for intelligent automation and context-aware pipeline tooling.
• Collaborate with engineering and operations teams to identify bottlenecks, reduce toil, and continuously improve the release process.
• Apply security best practices to deployment pipelines and cloud infrastructure, proactively identifying and remediating vulnerabilities.
• Monitor, observe, and optimize infrastructure performance, taking initiative to resolve complex issues before they impact customers.
• Evaluate emerging tools and technologies — particularly in the AI/LLM space — and provide guidance on how to incorporate them effectively into organization workflows.
• Communicate technical strategies and recommendations clearly to senior internal and external stakeholders, adapting your approach to diverse audiences and often driving alignment on difficult decisions.

Qualifications:

• 5+ years of related DevOps/infrastructure engineering experience (or 3 years with a Master’s degree or equivalent experience).
• Deep, hands-on expertise with Terraform for infrastructure as code — this is a must-have.
• Hands-on, production-level experience building and deploying AI/LLM-integrated systems — this is a must-have. You have worked directly with large language model APIs, designed AI-assisted workflows, and shipped real tooling powered by LLMs in an engineering or DevOps context.
• Hands-on, production-level experience with Model Context Protocol (MCP) — this is a must-have. You have implemented MCP-based integrations to build intelligent, context-aware developer tools, automation pipelines, or agent workflows, not just read about it.
• Strong command of CI/CD platforms (e.g., GitHub Actions, GitLab CI, Jenkins, CircleCI, or similar).
• Experience provisioning and managing cloud infrastructure on AWS, GCP, or Azure (EC2, VMs, VPCs, IAM, etc.).
• Solid understanding of cloud networking concepts (VPCs, subnets, security groups, load balancers, DNS).
• Demonstrated ability to work independently, resolve ambiguous and complex problems, and deliver high-quality solutions with minimal supervision.

Preferred:

• Experience with Kubernetes, Helm, or container orchestration platforms.
• Familiarity with GitOps workflows (e.g., ArgoCD, Flux).
• Scripting proficiency in Python, Bash, or Go.
• Knowledge of observability tooling (Datadog, Prometheus/Grafana, OpenTelemetry).
• Experience building internal developer platforms (IDPs).

US Pay Range:

The US National annual base salary range for this full-time position is $131,500-$154,700 + benefits + 401(k) match + equity. The pay range is determined by the role, work location, job-related skills, level, experience and relevant education. [Certain roles are eligible to earn sales commission, depending on the terms of the applicable plan.] The range displayed is the minimum and maximum target base salary and is applicable only for new hires for the listed position located in the US. Your Talent Advisor can share more details regarding salary ranges, benefits, and equity for your location during the hiring process.