7 hours ago
San Leandro, CA, USAMid Level
Responsibilities
- Own the security posture of AWS infrastructure managed with Terraform and Spacelift, including IAM policy review, secrets management, and network segmentation.
- Integrate security into the SDLC and CI/CD pipelines through code scanning, dependency and vulnerability management, and secure service defaults.
- Assess and secure control systems, OT environments, and data collection infrastructure.
- Operate security monitoring and detection tooling, triage alerts, and expand detection coverage.
- Define access-control standards, including conditional access, least privilege, MFA, IdP, and SaaS policies, in partnership with IT.
- Define macOS and Windows MDM security baselines for IT implementation.
- Build and lead incident response efforts and support response outside standard business hours when needed.
- Track security risk, establish compliance foundations, and run security awareness activities such as phishing simulations and training.
Requirements
- At least 4 years of security engineering experience spanning cloud security and application/DevSecOps work.
- Strong hands-on experience with AWS and Infrastructure-as-Code using Terraform.
- Practical identity security experience with SSO/IdP policy, Okta or an equivalent platform, conditional access, and least-privilege design.
- Experience with a security monitoring or detection platform such as SIEM, EDR, or specialized tools, including alert triage, tuning, and investigation.
- Understanding of secure SDLC practices, including SAST, DAST, dependency scanning, secrets management, and security-focused code review.
- Ability to communicate risk clearly to non-security stakeholders and make pragmatic trade-offs.
- Preferred experience securing control systems, OT, industrial environments, data collection pipelines, CI/CD-integrated IaC workflows, or hardware-adjacent IT environments.
- Preferred experience building a security program from scratch, compliance experience with SOC 2, ISO 27001, NIST, or relevant sector frameworks, and Python or Go scripting for security automation.
- Comfort working as the sole dedicated security resource and willingness to obtain relevant certifications such as AWS Security or GIAC/GSEC.
Benefits
- Medical, dental, and vision coverage.
- Relocation assistance for roles that require it.
- Flexible time off, plus two weeks of paid time off built into the end of each year subject to team and business needs.
- 10+ paid holidays and supportive leave of absence policies.
- Paid leave for new parents and access to a 401(k) retirement plan.
- Meals provided onsite at the San Leandro and Napierville facilities.
- Based in or willing to work from the San Leandro, California office, with occasional travel to other Fuse locations.
About Fuse
Fuse is a youth-focused advertising agency that develops and runs brand strategy, experiential, social/digital, PR, and creative programs for teens and young adults. Privately held and founded in 1995, it is headquartered in Winooski, Vermont, and works across sports, music, fashion, gaming, and campus channels for consumer brands.