Security Operations Engineer

The Role

Our battery systems and the software that runs them are deployed at customer sites such as industrial campuses, EV charging hubs, and utilities, with more underway. Each of these markets comes with its own security requirements, and we want to meet them with systems that are secure, maintainable, and simple to operate.

We're hiring a Security Operations Engineer to own security across our AWS platform, corporate IT, and a fleet of connected edge controllers at remote sites. You'll build the controls, run detection and response, and turn compliance requirements into working systems as we earn and maintain security certifications, including ISO 27001 and CMMC Level 2 as we pursue defense work. The team is small, so you'll make the calls on tooling and architecture and see them land in the field.

What You'll Do

• Own the security posture of our distributed edge fleet: hardened Linux baselines, secure provisioning and remote access, signed updates, and security telemetry.
• Build and maintain secure cloud and edge infrastructure as code (Terraform, Ansible), including network segmentation, secrets management, access control, and audit logging.
• Run detection and response: EDR and cloud threat detection, alert triage, and leading incident response with the engineering team.
• Run vulnerability management across cloud services, software, and device firmware, including pentest scoping and remediation.
• Own the technical controls and evidence behind our security certifications, and lead audits and assessments.
• Work with engineers on secure design: authentication between devices, services, and users; CI/CD security; and reviews of new features.
• Support customer security reviews, write standards, and help with IT security as needed.

Must-Haves

• 5+ years of professional experience in infrastructure, systems, security, or software roles, including at least 2 years focused on security operations or security engineering.
• Strong Linux background across cloud and remote, embedded, or on-premise environments.
• Hands-on infrastructure as code and configuration management on AWS (Terraform, Ansible, or similar).
• Experience running incident response and vulnerability management in production.
• Experience implementing and documenting controls for a framework such as ISO 27001, SOC 2, or NIST SP 800-171.
• Scripting for automation; Python preferred.
• A practical approach: security that lets the team ship.
• Must be a U.S. person (U.S. citizen, lawful permanent resident, or protected individual), as required for work involving Controlled Unclassified Information.

Nice-to-Haves

• CMMC Level 2 or NIST SP 800-171 experience: system security plans, POA&Ms, SPRS scoring, or CUI enclaves.
• Security experience with operational technology, industrial, or energy systems.
• Working knowledge of authentication and authorization protocols (OAuth, SAML, OIDC) and PKI.
• Experience with CrowdStrike or similar EDR, and Vanta or a similar compliance platform.

Work Authorization: Critical Loop does not provide visa sponsorship for this role. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e H-1B, TN, STEM OPT training plans etc.).