Security & Compliance Engineer

About the role

Aurelian is seeking its first dedicated Security & Compliance Engineer to build and manage our security programs. This role involves both hands-on security engineering and ownership of compliance initiatives. You will be crucial in ensuring the security of systems handling sensitive 9-1-1 call data and maintaining our compliance posture.

Key facts

What you'll do

• Be the definitive source for Aurelian's handling of sensitive data, ensuring all security claims are accurate and consistent.
• Manage the compliance program, including SOC 2 and CJIS Security Policy alignment, with potential for FedRAMP/GovCloud.
• Create and maintain essential compliance documents like subprocessor lists, data retention policies, and incident response plans.
• Streamline the customer security questionnaire process to support sales and implementation teams.
• Enhance cloud infrastructure security (Azure), focusing on IAM, tenant isolation, logging, auditing, and secure development.
• Implement compliance automation tools for continuous monitoring and efficient evidence collection.
• Oversee personnel security requirements for CJIS, including background checks, training, and access controls.

Requirements

• Approximately 5-8 years of combined experience in security engineering and GRC, with a strong foundation in both.
• Direct experience with SOC 2 and familiarity with CJIS Security Policy, NIST 800-53/800-171, or FedRAMP.
• Ability to secure cloud environments (Azure preferred), understand IAM, encryption, network isolation, and logging, and automate controls.
• Capable of clearly communicating complex security information to auditors, public-sector officials, and internal teams.
• A proactive approach to identifying needs, building solutions, and driving projects to completion.
• Must be authorized to work in the US without visa sponsorship.
• Must be able to pass a state and national fingerprint-based background check for CJIS clearance.

Nice to have

• Experience in the public sector, GovCloud, or regulated SaaS environments.

Skills & tools

• Azure
• IAM
• GRC tooling
• Scripting

Practical notes

• Comprehensive benefits include medical, dental, vision, life insurance, 401(k), unlimited PTO, and relocation assistance.
• Company-wide offsites, equipment stipend, and daily delivered lunches are provided.
• This role is on-site in Seattle.