Security Engineer

Ontra is a remote-first company, with access to coworking spaces and offices in a few key cities for employees who may prefer in-person working options. We value connection, investing in opportunities for in-person and virtual gatherings with your Ontra colleagues.
We currently are able to hire exclusively in the locations listed below. Select jobs may have more specific location requirements due to business needs.
United States
Arizona, California, Colorado, Connecticut, Florida, Georgia, Illinois, Massachusetts, Maryland, Minnesota, North Carolina, New Jersey, Nevada, New York, Oregon, Pennsylvania, Tennessee, Texas, Utah, Virginia, Washington
APAC
Hong Kong, Singapore
EMEA
United Kingdom
For this job we are currently only hiring candidates based in the United States.
About the team & opportunity
Ontra is seeking a Security Engineerreporting to our Director of Security Operations.
This role is a great opportunity for seasoned security professionals who are passionate about safeguarding cloud-based operations and driving innovation in cybersecurity. As a Security Engineer, you'll have the chance to lead initiatives in reducing risks, ensuring compliance, and fostering a secure environment for our organization's digital assets.
If you are an experienced security engineer with a proven track record in cloud infrastructure security, adept at solving complex security challenges, and thrive in a collaborative, fast-paced environment, we'd love to get to know you.
What you'll do

• Vulnerability Management: Identify and remediate security vulnerabilities across cloud and developer environments, as well as develop strategies to monitor security posture continuouslyImplement Security Tooling: Deploy security tools and collaborate with teams to integrate tooling into the development lifecycle
• Risk Mitigation: Lead efforts to enhance security posture by proactively identifying and mitigating risks across cloud, code, and developer environments.
• Assessment and Improvement: Conduct thorough assessments of critical systems and infrastructure, proposing and implementing updates or improvements to address emerging threats.
• Collaboration and Control Strengthening: Collaborate closely with cross-functional teams to deploy and configure security controls, monitor systems, and strengthen access controls.

What you'll bring

• Security Expertise: 3+ in security engineering roles, with a focus on public cloud infrastructure security (preferably AWS), managing Kubernetes environments, and experience with security technologies such as EDR/XDR, SIEM, SAST, DAST.
• Programming expertise: Proficiency in object-oriented programming languages such as Python, Golang, or Ruby, along with experience in CI/CD pipelines and automated security testing.
• Compliance Knowledge: Strong understanding of security standards and frameworks (e.g., NIST, CIS Benchmarks, OWASP).
• Communication Skills: Excellent communication and collaboration skills, with the ability to articulate complex security issues clearly to technical and non-technical stakeholders.
• Education: Bachelor's degree in computer science, information systems, or information security, along with relevant certifications (CISSP, OSCP, CEH, etc.).

Pay transparency
Ontra takes individual candidate location, experience, and skills into consideration when determining compensation. The base pay range is listed below. Additionally, all positions are eligible for unit-based equity grants.
Some positions may be eligible for additional compensation, such as commission or other variable compensation structures, which is not included in the below base pay range.
If you are selected to participate in our interview process, your Talent Acquisition Partner will share more details about the total compensation package for the role.
Base pay range
$146,000 - $204,000 USD
Benefits snapshot

• Remote-first working policy, with options for coworking
• Twice yearly team offsites for in-person collaboration
• Paid flexible time off policy
• Paid parental leave and parental benefits
• Monthly phone and internet reimbursement
• Company-sponsored LinkedIn Learning accounts, department budgets for professional development, & robust onboarding program
• Various options for medical, dental, and vision insurance

About Ontra
Ontra is the global leader in Contract Automation and Intelligence for private asset management firms. The Ontra platform combines AI-enabled software with a worldwide network of highly trained lawyers to modernize recurring legal workflows. Ontra's solutions improve all aspects of the contract lifecycle - from negotiating and processing routine contracts to tracking obligations in complex agreements. Ultimately, Ontra reduces the time, expense, and risk associated with contract management, freeing its customers to focus on other strategic priorities.
Inclusivity
Ontra is committed to the full inclusion of all qualified individuals. As part of this commitment, Ontra will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact [email protected].
Personnel Privacy Notice: https://bit.ly/46lVT74
Note on Employment Verification: All employees hired will be required to verify identity and eligibility to work in their particular location.
Note to External Agencies: We are not accepting any blind submissions or resumes/CVs from recruitment agencies. Any candidates sent to Ontra will NOT be accepted or considered as a submission without a signed agreement in place.
#BI-Remote
#LI-Remote