Security & Compliance Engineer

About the role

Aurelian develops AI tools like AVA and CORA to assist 911 centers by automating non-emergency call handling and providing real-time guidance for emergency dispatchers. We are looking for our first dedicated security and compliance owner to build and manage our security infrastructure and regulatory programs from the ground up.

Key facts

What you'll do

• Serve as the primary authority on how the company manages sensitive data and ensure security claims remain accurate across all contracts and documentation.
• Manage compliance programs including SOC 2 and CJIS Security Policy, while preparing for future FedRAMP and GovCloud requirements.
• Create and maintain essential documentation such as data retention policies, subprocessor lists, and incident response plans.
• Accelerate the sales cycle by managing customer security questionnaires and working with implementation teams to provide prompt, technical responses.
• Implement security improvements in Azure, including IAM configuration, tenant isolation, network security, and audit logging.
• Automate compliance workflows and evidence collection to move toward continuous controls monitoring.
• Oversee personnel security requirements, including security training and background checks for staff accessing criminal justice information.

Requirements

• Approximately 5 to 8 years of combined experience in security engineering and GRC.
• Proven ability to manage compliance programs such as SOC 2 and deep familiarity with CJIS Security Policy or NIST 800-53/800-171.
• Technical proficiency in cloud security, specifically hardening Azure environments, managing encryption, and configuring IAM.
• Experience scripting and using GRC tools to automate security controls.
• Ability to communicate technical security concepts to auditors, state officials, internal engineers, and sales teams.
• Must be authorized to work in the US without visa sponsorship.
• Must be able to pass a state and national fingerprint-based background check for CJIS clearance.

Nice to have

• Prior experience in the public sector, GovCloud, or highly regulated SaaS environments.

Skills & tools

• Azure
• SOC 2
• CJIS Security Policy
• NIST 800-53 / 800-171
• FedRAMP
• IAM
• Cloud Infrastructure Security

Practical notes

Benefits include medical, dental, vision, and life insurance, 401(k), unlimited PTO, company-wide offsites, equipment stipend, relocation assistance, and daily catered lunches. The role includes startup equity. Aurelian encourages applicants to apply even if they do not meet every listed qualification.