Security Operations Engineer

Island is redefining the modern workplace with a focus on security and user experience. They are seeking a Security Operations Engineer to manage and enhance their vulnerability and compliance scanning program, ensuring robust security measures across various environments.

What you'll do:

• Operate and maintain vulnerability scanning tools across web applications (Burp Suite), infrastructure/network (Nessus), and container/runtime environments (Sysdig), with exposure to Wiz as a plus
• Run scans on a regular cadence and on-demand for releases, audits, and special initiatives
• Support FedRAMP continuous monitoring (ConMon) activities across US GovCloud environments
• Assist with evidence collection and compliance tracking, including familiarity with NIST 800-53 controls and tools like eMASS
• Triage scan results, identify and filter false positives, prioritize findings by risk, and open/track remediation tickets in Jira
• Partner with engineering teams to ensure SLA adherence and timely remediation
• Produce reports and compliance artifacts for internal stakeholders and external auditors
• Contribute to and maintain the compliance evidence repository
• Improve scanning workflows through automation, scheduling, alerting, and result normalization
• Collaborate closely with the SecOps Lead and broader product security team, contributing to sprint planning and cross-functional initiatives

What they're looking for:

• 1–3 years of experience in security operations, IT security, or a related field (or equivalent hands-on experience through internships, labs, or personal projects)
• Hands-on familiarity with vulnerability scanning tools such as Burp Suite, Nessus, Tenable, or similar (experience with at least one required)
• Basic understanding of AWS cloud infrastructure and containerized environments (Kubernetes, Docker, Chainguard)
• Strong organizational skills with the ability to manage multiple open findings and parallel workstreams
• A curious, self-driven mindset with a desire to expand beyond a defined lane over time
• Clear and effective communication skills across Slack, Zoom, and email in a distributed team environment
• US citizenship and ability to work within FedRAMP-regulated environments
• Ability to work onsite in Dallas, TX
• Exposure to structured compliance environments; familiarity with FedRAMP, NIST 800-53, or similar frameworks is a strong plus
• Scripting or automation skills (Python, Bash) are a plus

Benefits:

• Comprehensive health, dental, and vision coverage
• 401(k) with company match
• Generous paid time off and company holidays
• Professional development opportunities
• Collaborative, high-performance culture
• Modern office environment in Dallas, TX