Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 31 hours ago

Senior Security Operations Engineer

Pilotbase5 open roles

Pay
$120,000 – $130,000 a year
Where
Overland Park, Remote - United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security Operations EngineerPilotbase · Overland Park, Remote - United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Pilotbase's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 31 hours ago

The posting

About Pilotbase:

Pilotbase is a connected system that brings together flight schools, pilots, and industry partners into a single, data-driven network. This next phase of growth is focused on expanding within our existing customer base, reaching pilots directly, and creating new revenue streams across the ecosystem.

Job Overview:

As the Senior Security Operations Engineer, you will own the hands-on security functions of the team implementing controls, closing findings, running detection and response, and producing the evidence our compliance programs depend on. The Security Manager sets the standards, you make them real, and show that they hold. You will work across endpoints, cloud, identity, applications and vendor security, ranging from alert triage through to control design by researching options and proposing designs or tooling.

Responsibilities:

The primary function is accountability for security outcomes in your domains being achieved and demonstrable. Where a control is claimed, you implement it, operate it, enforce its SLA, and evidence it. This role implements, operates, remediates and evidences. It also offers guidance and suggestions on proposing standards, policies, compliance frameworks and security tooling. As the team and the company scale, this role will grow to include additional related responsibilities.

Remediation and Closure

● Owns closure of security findings end to end: triage, prioritisation against the standard, driving the remediation cycle against existing findings with platform owners, and verifying closure. Closure, not detection, is the deliverable.

● Manages, reviews and drives outcomes against penetration tests, vulnerability and posture scans, audit gaps, access reviews, and CVEs across the estate.

● Security is an overlay onto other domains, so where security does not own the platform you own the finding and its closure while holding the platform owner (IT, DevOps, Engineering, etc) to executing the fix.

Functional Security

● Endpoint security direction and Tier 1 asset hardening.

● Vulnerability and application security scanning, and enforcement of its SLA.

● Cloud security posture management: stand up, then SLA enforcement.

● Data loss prevention: prevention and monitoring controls.

● Access control: least privilege, dual control, and other access validations.

● Network Security implementation at the cloud edge (alongside DevOps).

Detection and Response

● Operates managed detection and response end to end, including day to day interactions with the provider.

● First responder for security events, carrying triage through to closure.

● External phishing investigation and prevention.

● Selection, implementation, and operation of a SIEM (when approved).

Audit Evidence and Control Operation

● Produces and packages audit evidence for compliance frameworks (SOC 2 Type II, PCI DSS v4, etc) where automated collection cannot reach it.

● Runs the recurring access review cycles; mitigates, remediates, or otherwise drives corrections.

● Builds the controls that close audit gaps, and returns the evidence that shows they operate.

Tooling, Design and Automation

● Researches, vets and recommends security tooling; owns day to day use once approved.●

● Drafts solution designs for new controls; implements on approval.

● Supports security architecture reviews for new services and integrations.

● Builds and maintains automation to remove recurring manual work from role scope.

Also Supports

● Technical contact for the QSA, ASV and external auditor, including the quarterly external scan cycle.

● Security questionnaires (CAIQ, HECVAT, etc) answered from the evidence library, and upkeep of that library.

● Review of vendor security assessments.

● Security awareness training, including Internal phishing simulation campaigns and content recommended for approval.

Qualifications:

REQUIRED:

Experience: 5+ years full time in an in-house security role, with hands-on ownership of controls in one or more of the domains above, and a track record of driving findings to verified closure.

Technical Skills:

○ Identity and access including least privilege, privileged access, conditional access, and running access reviews.

○ Detection and response using an EDR, a SIEM or a managed provider, from triage through containment.

○ Vulnerability management measured by closure rather than detection.

○ Audit evidence production for SOC 2, ISO 27001, HITRUST, PCI or equivalent, as a deliverable rather than background knowledge.

○ Endpoint management and hardening across macOS and Windows.

○ Scripting in PowerShell, Python or Bash, with API integration.

○ AI tooling Fluent use of major platforms as a daily driver.

OPTIONAL

  • Cloud security posture management in Azure or AWS.
  • Data loss prevention deployed and monitored (beyond policy writing).
  • Network security implementation: segmentation, firewalls, VLANs and VPNs.
  • Direct work with a PCI-DSS QSA, ASV or external auditor (as the technical contact).
  • Comfortable presenting to all levels of the company (executives to junior colleagues)

Certifications: CISSP, CISM, GIAC (GSEC, GCIH, GCIA), CompTIA Security+ or CySA+, Microsoft SC-200 or AZ-500, AWS Certified Security Specialty.

Benefits:

  • Full benefits package (Medical, Dental, Vision, Short-Term Disability, Life Insurance, 401(k) plan)
  • Equity Appreciation Plan
  • Flexible Time Off policy
  • Seven (7) company-wide paid holidays + two (2) floating holidays
  • Two (2) wellness days
  • Employee Assistance Program
  • Professional Development Stipend
  • Home Office Stipend

Compensation:

The salary range for this role has been established at $120,000.00 - $130,000.00 annually. The final agreed-upon compensation is based on a number of factors, including but not limited to: individual education, qualifications, skills, prior work experience, competencies, and geographic work location. The above salary range represents the Company’s good faith and reasonable estimate of the range of possible compensation at the time of posting.

Travel Requirements:

  • Occasional business travel may be required, up to 10%.

Deadline for Applications:

  • The company will accept ongoing applications until the role is filled. There is no deadline to apply for this position.

Pilotbase is an equal opportunity employer and encourages all qualified individuals to apply. If you're excited about this role, we'd love a chance to review your resume. We value a diverse and inclusive work environment and look for passionate people who are ready to do great things. If there is a required or preferred location for an open role, it will be listed in the job description. All applicants for employment must be legally authorized to work in the United States. Pilotbase does not provide work visa sponsorship at this time.

This employer participates in the Electronic Employment Verification Program. Please visit https://www.e-verify.gov/about-e-verify for more information.

Pilotbase welcomes all direct applicants, but does not utilize recruiting services from external agencies.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Pilotbase's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Pilotbase's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Pilotbase's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.