Security Operations Engineer, FreeWill

• 5+ years in security operations, security engineering, or related roles
• Deep experience with cloud security (AWS/GCP/Azure)
• Hands-on experience with identity management and SSO systems
• Track record of managing security incidents from detection to resolution
• Experience with security compliance frameworks (SOC2, ISO 27001, etc.)
• Proficient with security tools: SIEM, EDR, vulnerability scanners, cloud security platforms
• Strong scripting abilities (Python, Bash, or similar)
• Experience with infrastructure as code (Terraform, CloudFormation)
• Understanding of DevSecOps practices and CI/CD security
• Knowledge of Zero Trust principles and implementation
• Operates with high autonomy while knowing when to escalate or collaborate
• Balances security requirements with business velocity
• Communicates complex security concepts clearly to non-technical stakeholders
• Thrives in ambiguity and can context-switch effectively
• Brings a growth mindset and stays current with emerging threats

Desirable

• We're seeking a SecOps Engineer to join our established security team as we continue to enhance our industry-leading security program
• You'll help strengthen our robust security infrastructure and advance our cutting-edge security initiatives, including enhanced identity management, Zero Trust architecture expansion, and AI security innovations
• You'll work closely with our Director of Technology & Operations, Platform Engineering Manager, and existing security team members to maintain our SOC2 compliance, enhance our incident response capabilities, and continue embedding security excellence into everything we do
• This is a hands-on role where you'll contribute to protecting our mission-critical systems and the sensitive data of millions of donors and thousands of nonprofit partners
• Security Operations & Incident Response (40%)
• Enhance our security monitoring and incident response processes across our cloud infrastructure
• Support our vulnerability management program and coordinate remediation efforts
• Optimize and maintain our existing security tooling (SIEM, EDR, cloud security platforms)
• Refine security runbooks and incident response procedures
• Support security investigations and forensics when needed
• Security Enhancement Initiatives (40%)
• Expand our Single Sign-On (SSO) implementation to additional systems
• Advance our Zero Trust architecture to the next level
• Evaluate and integrate AI-specific security controls into our existing framework
• Enhance automation of security processes and controls
• Continue modernizing our authentication and authorization systems
• Compliance & Partnership Support (20%)
• Support the Director of Technology & Operations with our ongoing SOC2 compliance program
• Handle security questionnaires for enterprise customers
• Lead vendor security assessments for third-party integrations
• Provide technical security expertise on customer calls
• Collaborate with our security team during peak periods
• Maintain and update security policies and procedures
• Support strategic security initiatives as needed

• We are reviewing applications on an on-going basis. We anticipate starting initial interviews the week of December 8th, 2025
• Recruiter Phone Screen (30 minutes)
• Hiring Manager Interview (30 minutes)
• Live or Take Home Assignment (60 minutes)
• Final Interviews (Likely 3 separate 30 minute final interviews with FreeWill team members)
• Offer (contingent on positive references)