Senior Security Engineer (Defender of the Realm)

Description

Do you see threats where others see business as usual, and love turning that instinct into real defenses? Do you read a CrowdStrike detection, a GuardDuty finding, and a vulnerability scan report and already know which one matters most? Have you made AI a real part of how you do security? We mean a tool you use every day to triage faster, cut noise, and spend your time on the work only a human can do, not a buzzword on your resume. If so, read on…

RTA is looking for a Senior Security Engineer to protect every layer of our tech stack and culture. Our Fleet360 platform is a multi-tenant SaaS on AWS. Hundreds of fleets rely on it, including cities, counties, school districts, transit agencies, and public safety organizations. Those customers expect government-grade security, and we're building toward it.

You'll report to the Director, Support Engineering and work alongside our Cloud, Systems, and Database Engineers, partnering with teams across the company to keep our customers' fleets, and our reputation, safe.

This isn't a "watch the dashboard and forward the alert" role. You'll be a hands-on security engineer who identifies risks, builds practical solutions, and helps strengthen RTA's security posture. One day you might be improving an incident response process, and the next building an AI-assisted triage workflow or advancing our compliance readiness.

This role is not for everyone. If you prefer clearly defined tasks handed to you one at a time, this may not be your seat. We're looking for someone who sees an undefined security problem, takes ownership, and brings a thoughtful plan to solve it.

Your Top 3 Objectives & Measures of Success

Strengthen RTA's Security Posture

Proactively identify, prioritize, and remediate security risks across our AWS infrastructure, endpoints, applications, and identity systems. Build sustainable security practices that reduce exposure and improve our ability to detect and respond to threats.

Measures of Success:

• •Critical and High vulnerabilities are identified, prioritized, and tracked through resolution.
• •Critical vulnerabilities are remediated within 7 days and High vulnerabilities within 30 days, or have documented, approved risk exceptions.
• •Security incidents are promptly escalated, appropriately contained, and documented with clear root cause analysis and follow-up actions.
• •Cloud, endpoint, and identity security configurations are regularly reviewed and improved, with measurable progress against established security baselines.

2. Drive Compliance and Audit Readiness

Maintain RTA's SOC 2 Type II readiness while advancing our GovRAMP/FedRAMP security roadmap. Partner across the organization to implement controls, manage risks, and maintain the documentation and evidence needed to demonstrate compliance.

Measures of Success:

• •Assigned SOC 2 controls are maintained, tested, and supported by current, accurate evidence.
• •Within the first 90 days, complete a security gap assessment and establish a prioritized GovRAMP/FedRAMP readiness roadmap with leadership.
• •Compliance gaps, risks, and remediation activities are documented, assigned, and tracked against agreed-upon timelines.
• •Annual audit activities are completed on schedule, with minimal last-minute evidence collection or avoidable findings.

3. Scale Security Through AI and Automation

Use AI and automation to improve the speed, consistency, and effectiveness of security operations while ensuring the tools and workflows themselves are secure.

Measures of Success:

• •Within the first 6 months, implement at least two production-ready security automations that reduce manual effort or improve detection, investigation, or remediation.
• •Demonstrate measurable improvements in efficiency through reduced manual processing, faster triage, or improved workflow consistency.
• •Establish appropriate guardrails for AI-enabled security workflows, including data handling, access controls, and human oversight.
• •Identify and continuously improve opportunities to integrate security into existing engineering and business processes.

What You'll Actually Own

Protect & Detect

• •Run and tune CrowdStrike Falcon, AWS GuardDuty, CloudTrail, and our managed SOC/MDR pipeline.
• •Monitor detections, sensor health, prevention policies, and escalations, partnering with our 24x7 managed security provider to investigate and resolve threats.
• •Improve detection quality and reduce unnecessary alerts through tuning and automation.

Hunt & Fix

• •Own the vulnerability management process across cloud, endpoint, and applicable on-premises assets.
• •Manage Qualys or equivalent scanning, risk-based prioritization, remediation tracking, and verification.
• •Coordinate with Engineering and IT teams responsible for implementing fixes, and document approved exceptions in the Risk Register.
• •Coordinate Patch Tuesday reviews and annual external penetration testing.

Automate & Integrate

• •Integrate Snyk or similar SAST, DAST, SCA, and container security scanning into GitHub Actions and development workflows.
• •Partner with developers to identify and address security issues before deployment.
• •Build practical AI-assisted workflows for alert triage, scan analysis, remediation guidance, and evidence collection.
• •Champion security as code and repeatable, scalable processes.

Comply & Certify

• •Coordinate the technical security activities supporting RTA's annual SOC 2 Type II audit.
• •Advance GovRAMP/FedRAMP readiness through NIST SP 800-53 controls mapping, gap remediation, evidence management, and POA&M tracking.
• •Partner with control owners and leadership to maintain audit readiness throughout the year.

Respond & Recover

• •Coordinate security incident response activities, including investigation, containment, recovery, root cause analysis, and documentation.
• •Work with the managed SOC/MDR provider and internal stakeholders to ensure clear escalation and accountability.
• •Maintain and test incident response plans and participate in tabletop exercises.

Govern & Guide

• •Develop and maintain practical security policies, procedures, and playbooks.
• •Strengthen identity and access security across Microsoft Entra ID SSO, Cloudflare Zero Trust, Auth0, and least-privilege IAM.
• •Maintain an actionable security Risk Register and communicate material risks and recommendations to leadership.
• •Help establish appropriate security guardrails for company AI adoption, including data protection, vendor risk, and prompt injection awareness.

Support Our Customers & Teams

• •Lead technical security responses for customer questionnaires, RFPs, HECVAT assessments, and vendor due-diligence requests.
• •Support security awareness initiatives, including monthly training and employee education.
• •Serve as a security subject matter expert and mentor to technical teams, sharing best practices and helping build security knowledge and capabilities across the organization.
• •Partner with Product, Engineering, Support, and other departments to make security a shared responsibility.
• •Translate complex security risks into clear, actionable recommendations for technical and nontechnical audiences.

What We're Looking For

In general, someone who:

• •Is a service-minded protector who measures success by how secure, and how empowered, others feel.
• •Has truly adopted AI into how they work. You use AI tools to improve productivity, automate repetitive work, and solve problems while understanding where human judgment and security safeguards matter most.
• •Is comfortable with healthy conflict and constructive feedback. You can challenge ideas respectfully, welcome different perspectives, and work toward the best outcome for the team.
• •Is Humble, Hungry, and Smart. Patrick Lencioni fans earn bonus points.
• •Passionately cares about our clients. They are fleet managers, parts clerks, and technicians maintaining everything from squad cars to school buses, so everyone comes home safely at the end of t