Full-Time Senior Security Engineer

About EnergyHubEnergyHub empowers utilities and their customers to create a clean, distributed energy future. We help consumers turn their smart thermostats, EVs, batteries, and other products into virtual power plants that keep the grid stable and enable higher penetration of solar and wind power.

About the Opportunity We're looking for an experienced Senior Security Engineer to join our team and help enhance the security of our infrastructure and software development lifecycle. This role will be hands-on with our cloud infrastructure and development toolchain and you will get to focus on both strategy and implementation to drive meaningful long-term improvements. You will have the opportunity to guide best practices for the entire EnergyHub engineering team and build and automate processes to enable fast and secure application delivery.

Main Responsibilities

• Keep raising the bar for EnergyHub’s infrastructure security to ensure customer data remains protected.
• Enable our engineering team to be highly productive, safely.
• Make it easy to do things the right way.
• Develop strategy for and participate in EnergyHub maintaining or achieving compliance with various regulatory frameworks such as SOC 2, SOX, ISO 27001, NIST-SP-800, NERC-CIP and others.
• Help guide the team in design and implementation of secure cloud infrastructure as we roll out improvements and new features.
• Identify and implement new controls to enhance our defense in depth.
• "Shift left" on application and container security by moving security testing farther upstream in the delivery process.
• Operate and automate our vulnerability management programs for applications, containers, and VMs.
• Manage core security tools and technologies such as SIEM, cloud security posture management, etc.
• Play a key role in cross-company security and compliance efforts.
• Partner with our parent security team (EnergyHub is an independent subsidiary of Alarm.com) to leverage additional tools and resources and capitalize on our collective strengths.

Required Skills and Experience

• In-depth knowledge of security principles and best practices developed over 7+ years of experience.
• Managed AWS all the way from security groups to organizations.
• Comfortable tackling ambiguous projects.
• Manage infrastructure as code using tools like Terraform, CloudFormation, or Ansible.
• Understand security implications of containerized environments (Kubernetes or ECS).
• Comfortable on the command line, shell scripting, and Linux system administration.
• Good understanding of core networking concepts (TCP/IP, routing, DNS).
• Experience administering declarative CI/CD workflows (e.g., GitHub Actions).
• Proficient in Python or other high-level programming languages.
• Stay on top of industry developments.
• Familiar with security management frameworks like CIS Controls, OWASP.

What is the last date for applying to the job?

Which countries are accepted for this remote job?