Skip to main content
David Careers

Engineer - Security

Posted yesterday

iralogixincPittsburgh (PA)
Information Security EngineersComputer Systems Design Services

SENIORITY

Lead

Apply (opens in a new tab)

About the role

Job Description
Company: IRALOGIX, Inc.
Position: Security Engineer
Location: Charlette, NC or Pittsburgh, PA
Job Type: Full-Time/Exempt
Industry: Retirement Services/FinTech Software
Travel: 0%-5%IRALOGIX is a high-growth, institutional technology platform focused on providing uniquely capable solutions to IRA providers, 401(k) recordkeepers, retirement-focused Advisors, Mutual Fund investment providers, and banks interested in growing their IRA capabilities, revenue, and market share. Through proprietary, ground-up technology, we are changing the landscape and are empowering client companies to provide broader access to the best retirement services possible while significantly lowering administration costs and increasing efficiency, profitability, and competitiveness, far beyond industry expectations.
Role Overview: We’re hiring a Security Engineer to join our lean and highly collaborative security function. Reporting to the Director of Security, you’ll play a central role in identifying risks and driving security outcomes across AWS infrastructure, containerized applications, CI/CD pipelines, SaaS platforms, and endpoints. This role is ideal for a broad generalist with 2–4 years of experience—someone who is passionate about security, thrives in modern cloud environments, and wants to grow into a versatile engineer who touches AppSec, DevSecOps, endpoint security, and compliance. We’re looking for adaptability, curiosity, and a strong grasp of fundamentals over deep specialization.
Key Responsibilities: Cloud Security & IAMSupport secure configuration of AWS services. Help develop identity and access guardrails across AWS and SaaS tools. Partner with DevOps to improve image lifecycle hygiene and container security.
CI/CD Security: Work with engineering and platform teams to define security gates for CI/CD.Help standardize secure build practices, secrets management, and artifact handling.
Vulnerability & Threat Management: Support triage and remediation of vulnerabilities surfaced via cloud and endpoint scanners. Engage with our SOC to respond to security events across cloud, identity, endpoint, and app layers.
Application Security: Help developers address legacy library vulnerabilities and integrate secure coding practices. Participate in threat modeling, secure SDLC planning, and code/toolchain reviews.
Governance & Compliance:
  • Assist in maintaining our SOC 2 Type II posture and mapping controls to frameworks (CSA CCM, CIS AWS).Collaborate with auditors and internal stakeholders to evidence controls and risk mitigation.
  • Endpoint & SaaS Security
  • Support Mac and Windows laptop security with device configuration/compliance management tools.
  • Help govern secure SaaS usage, enforce device compliance, and manage privilege escalation.
Education & Culture: Contribute to internal security training, awareness campaigns, and documentation. Champion a collaborative, secure-by-default culture across development and operations.
JOB DESCRIPTION: You Might Be a Fit If You Have...2–4 years of hands-on security, DevOps, or cloud engineering experience in modern environments. Familiarity with AWS IAM, containers (ECS, EKS), Terraform, SSO (Okta), and CI/CD workflows. Practical understanding of vulnerability management, secure coding, and cloud-native security tooling. Experience working in small teams or startups where everyone wears multiple hats. Comfort collaborating with developers, auditors, and cross-functional stakeholders. An eagerness to learn and improve—especially around AppSec, cloud IAM, and CI/CD security. Strong written and verbal communication skills.
Bonus Points:
  • For…Familiarity with Java, Python, Go, or Rust.
  • Experience securing GitHub Enterprise, Argos, Trivy, or other common DevSecOps tools.
  • Prior exposure to compliance frameworks like SOC 2, CIS, or CSA CCM.Contributions to open source or personal security projects.
  • Work Setup & Culture
  • Hybrid model: 3–4 days/week in our Charlotte, NC or Pittsburgh, PA office
  • Flexible and team-driven environment with high autonomy
  • Emphasis on learning, adaptability, and cross-functional support
  • No formal on-call, but expectation to assist during major incidents
  • What We Value

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this