Security Engineer

Company Description Voltus is the leading platform connecting distributed energy resources to electricity markets, delivering less expensive, more reliable, and more sustainable electricity. Our commercial and industrial customers and grid services partners generate cash by allowing Voltus to maximize the value of their flexible load, distributed generation, energy storage, energy efficiency, and electric vehicle resources in these markets. Job Description Are you interested in building the technical foundation of the worldwide transition to clean energy? Do you enjoy working with a highly motivated and talented team to deliver mission-critical software? Voltus is growing our Security Team to help deploy, manage, troubleshoot, and enhance our Platform and tools for its internal and external customers. You’ll help us identify our infrastructure gaps from a security perspective, create a roadmap, and work with the infrastructure/IT team(s) to close our gaps. This role splits time roughly 60% technical engineering and 40% governance, risk, and compliance (GRC). Responsibilities Engineering and Operations Build detections and security signal pipelines in Datadog. Serve as the subject matter expert on AWS Cloud and on-prem infrastructure security. Define and set up AWS and on-prem Security Monitoring/Best Practices Strategy. Act as the technical lead during security incidents, including investigation and remediation. Improve Terraform Modules and Infrastructure as Code (IaC) to follow security best practices. Develop and implement a vulnerability monitoring strategy and integrate it into CI/CD pipelines. Build security automation using Python, scripting, and APIs. Partner with Infrastructure on AWS security engineering, including IAM, KMS, and network segmentation. Governance, Risk, and Compliance Operate SOC 2 Type 2 evidence collection and audit response. Drive ISO 27001 implementation work, including risk assessments and control mapping. Ensure infrastructure compliance with regulatory requirements. Run vendor and subprocessor risk reviews. Respond to customer security questionnaires and external inquiries. Mentor and enable other team members to improve their security posture. Preferred Skills and Attributes 4–7 years of security engineering experience, ideally at a SaaS or remote-first company. Software development experience with Go or Python. Proven AWS Security Experience (IAM, KMS, VPC, CloudTrail, GuardDuty). Direct experience supporting a SOC 2 Type 2 audit cycle. Familiarity with compliance requirements such as ISO 27001, HIPAA, and GDPR. Experience with IaC tools like Terraform and containers such as Docker. Proficiency with monitoring and observability tools like Datadog or Prometheus. Strong focus on risk awareness and knowing when to make fast versus slow decisions. Security certifications such as CISSP, AWS Security Specialty, or GIAC are a plus. **Please include a link to your GitHub account in your application (in the “links” section). Applications without a GitHub account will not be considered** Please note that at this time, we do not sponsor visas or transfers for new hires . Voltus teammates need to be authorized to work from their home location (in the US or Canada, unless otherwise indicated on the role description). Additionally, while Voltus is an all-remote workplace, we have limitations on where employees are able to work for regulatory and security reasons. We expect that Voltans are working primarily from their home country. Working while traveling to other countries must be approved as per our Global Remote Travel Policy. At Voltus, we are proud to be an equal opportunity employer because we recognize that a diverse organization begins with a diverse candidate pool. This means we do not tolerate discrimination of any kind and are committed to providing equal employment opportunities regardless of your gender identity, race, nationality, religion, age, sexual orientation, veteran status, disability status, or marital status.