Security Engineer

About Ovative Group:

Ovative Group is an independent, full-funnel media, measurement, and creative firm transforming how brands grow. We partner with leading names like American Eagle, Best Buy, Domino’s, The Home Depot, Polaris, and UnitedHealth Group to build smarter media and measurement programs that drive real, profitable growth.

We don’t just track performance—we redefine it. Powered by our proprietary intelligence platform, EMRge, and our holistic metric Enterprise Marketing Return (EMR), we help brands connect revenue, customer, and brand outcomes into one clear picture of success. Our approach to full-funnel strategy, buying, and measurement delivers results that matter—and it’s getting noticed. Our work has been recognized by Digiday, Google, USA Today, Inc. 5000, and Search Engine Land.

About the Role:

Ovative Group is seeking a Security Engineer to join our growing Information Security team. Reporting to the Lead Security & Cloud Engineer, this role owns the day-to-day execution of security operations, threat and vulnerability management, and security tooling — and plays a hands-on role in securing our adoption of AI across the business. The ideal candidate is hands-on, detail-oriented, and comfortable operating across both cloud-native and enterprise productivity environments (GCP, Azure, M365, AWS).

Responsibilities:

Security Operations and Incident Response

Monitor security tooling and alerts across endpoint, cloud, and network environments; triage and escalate as appropriate

Perform log analysis and investigation to identify and scope the impact of security incidents

Support incident response and business continuity plan execution, including tabletop exercises and post-incident reviews

Support managed detection and response (MDR) partner relationships and act on partner recommendations

Participate in root cause analyses for security findings; identify contributing factors and implement permanent fixes

Threat and Vulnerability Management

Monitor threat intelligence feeds to understand the current threat landscape and turn findings into action for the team

Operate and monitor vulnerability scanning tools; track and remediate findings or document exceptions

Prioritize remediation efforts based on risk scoring and asset criticality

Coordinate with engineering and IT teams to ensure timely patching and hardening of cloud and endpoint systems

Support penetration testing engagements: coordinate logistics, track findings, and drive remediation to closure

AI Security Engineering

Help build,secure and monitor the infrastructure behind our AI adoption, including MCP servers, agent policy and proxy services, and connector integrations

Review, harden, and productionize AI-assisted and internally built applications and automations before they reach production data

Perform the technical side of AI vendor and tool evaluations in partnership with our Security Analyst, including secure configuration, integration review, and onboarding

Implement guardrails and monitoring for AI tools and agents, including logging, data protection, and identity for non-human actors

Stay current on AI security research and practice (OWASP GenAI Security, prompt injection, agentic risks) and recommend tooling and secure design patterns

Provide hands-on guidance and training for teams building and working with AI tools, agents, and frameworks

Security Tooling, Automation, and Cloud Operations

Administer and tune security tools including SIEM, vulnerability scanners, EDR, and cloud security posture management (CSPM) platforms

Build and maintain automation and scripts (Python, Bash, or similar) to streamline security operations and reduce manual toil

Support day-to-day cloud operations and IAM hygiene across GCP and Azure in partnership with our cloud security and infrastructure engineers

Document and provide evidence for the technical controls you operate in support of SOC 2 and client security audits

Evaluate and recommend new security tools in partnership with the Head of Information Security

Skills and Qualifications :

Two-year or four-year degree in computer science, information security, technology, or related field; or 3+ years of equivalent experience

2–5 years of experience in security operations, security engineering, site reliability engineering, or a similar hands-on role — title and level will be commensurate with experience

Experience with vulnerability management tools and remediation workflows

Working knowledge of GCP and/or Azure security services and configurations

Familiarity with IAM, secrets management, and network security concepts in cloud environments

Proficiency in shell scripting and Python, TypeScript, Go, or similar programming languages

Hands-on experience using generative AI tools in daily work, and a strong interest in securing them

Experience with modern DevSecOps practices and technologies (GitHub, Jira, Confluence)

Experience operating across cloud-native security and enterprise productivity environments (GCP, Azure, M365)

Strong analytical and problem-solving skills; high attention to detail

Ability to communicate and champion security concepts and practices clearly to developers, data engineers, data scientists, and technical and non-technical leadership

Preferred Qualifications

Security certifications (CCSP, CEH, GSEC, GCIH, etc.)

Experience with IaC tools such as Terraform, Ansible, or Puppet

Hands-on experience with CSPM (Wiz, Lacework, etc.) and SIEM platforms

Experience with containerization technologies (Kubernetes, Docker)

Hands-on experience with MCP servers, agent frameworks, or other applied AI security work

Familiarity with AI security frameworks and guidance (OWASP GenAI Security, NIST AI RMF)

Experience securing personal information or other regulated data

Exposure to security administration of BigQuery, Databricks, or similar data platforms

Pay Transparency:

At Ovative, we offer a transparent view into three core components of the total compensation package: Base Salary, Annual Bonus, and Benefits.

For our Senior Analyst positions, including the position of Security Engineer, our compensation range is from $75,000 to $93,000 on an annualized basis, which is inclusive of an annual bonus opportunity of 15% of base salary.

Working at Ovative Group:

We provide strong, competitive, holistic benefits that understand the importance of your life inside and out of work.

At Ovative, culture isn’t a buzzword—it’s the reason we’ve been named a Top Workplace for ten years running. We lead with trust, transparency, and a commitment to doing the hard work others avoid.

We offer flexibility. You'll work from our Minneapolis, Chicago, or New York office on set days each week, and an option to work remote on others.

Our open floor plan reflects our open communication and flat structure—where interns collaborate with VPs, analysts partner with senior leaders, and our CEO engages with every team member. Together, we create an environment where smart, driven people can do their best work and support one another in the process.

We’re equally committed to inclusion and belonging. Ovative fosters a workplace where everyone can participate and thrive—regardless of ethnicity, gender, sexual orientation, gender identity, or expression or other protected class status. Our benefits and policies reflect that commitment, from inclusive medical leave coverage for same-sex spouses to equitable care and support for all families.

Benefits:

We strive to hire and retain the best talent by offering fair, competitive compensation, a meaningful bonus program, and excellent health coverage. When the company performs well, we all benefit.

Some tangible benefits and amenities we enjoy:

Access to all office spaces in MSP, NYC, and CHI

Frequent, paid travel to our Minneapolis headquarters for company events, team event