Note: The job is a remote job and is open to candidates in USA. OnTrac is a provider of same-day and next-day delivery services in the United States. The IT & Cyber Security Senior Engineer will design, build, and maintain security architectures across hybrid environments, enable SOC detection and orchestration, and support GRC through technical controls and automated evidence collection.
Responsibilities
- **SOC + GRC enablement:** Design and implement technical solutions that assist the SOC in alert orchestration (SOAR) and provide the GRC team with automated risk monitoring and evidence collection capabilities
- **Security integration:** Lead the integration of security tools (EDR, SIEM, Cloud Security) to ensure a unified and visible security posture
- **Risk management support:** Assist in technical risk assessments by identifying vulnerabilities and recommending/implementing remediation engineering
- **Architecture & engineering:** Develop and maintain security infrastructure across hybrid environments (on‑prem/cloud), applying security by design to new deployments
- **Incident response escalation:** Serve as a Tier 3 escalation point for complex incidents requiring deep forensic and/or architectural expertise
- **Mentorship:** Guide junior engineers and analysts, fostering technical excellence and proactive security practices
Skills
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience)
- 10+ years of progressive experience in IT and Security
- At least 3 years in a senior or lead engineering capacity
- Strong ability to code/script in Python, PowerShell, or Bash to automate repetitive security tasks and integrations
- Deep understanding of SIEM logic, YARA rules, and EDR configuration to improve detection efficacy
- Ability to interpret NIST CSF, ISO 27001, or SOC2 and implement the technical controls required to meet them
- You bring the “generalist” mindset, with proficiency across network security (firewalls, Zero Trust), endpoint protection, and cloud security (AWS/GCP)
- You communicate exceptionally, explaining deep technical vulnerabilities to non-technical risk stakeholders and translating risk/context back into technical action
- You analyze complex issues with multiple variables and apply sound judgment in high-impact situations
- You define methods and procedures for new assignments, selecting and adapting advanced techniques to achieve results
- You deliver innovative and effective solutions to challenging issues
- Preferred CISSP, CISM, or hands-on technical certifications like GIAC (GCIA, GCDA) or Offensive Security (OSCP)
Benefits
- Bonus, commission, or other incentive compensation in accordance with the terms of the applicable plan of up to a 20% Bonus Target.
- Medical, dental, and vision insurance
- Life and short- and long-term disability coverage
- 401(k) retirement savings plan with company match
- Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
- Two (2) floating holidays per year
- Paid sick leave
- Six (6) paid company holidays
- Two (2) weeks paid pregnancy disability leave
- Four (4) weeks paid parental bonding leave
- Additional wellness and employee assistance programs
- This position may be performed remotely in states where the company is authorized to employ individuals.
Company Overview
Company H1B Sponsorship