Security Operations Engineer

As a member of the Cybersecurity team youll report directly to our Director of this role you will be a key member of the team focusing on maintaining and improving our security across external systems and product-related issues. Youll ensure our systems are secure and comply with regulations like SOC 2 GDPR and CCPA while also playing a vital part in our incident response and vulnerability management.

You will have a direct impact on our organization by helping to manage major security risks and ensuring our systems are trustworthy for both customers and our sales team. Youll work daily with a wide range of teams including product engineering legal and HR acting as the main point of contact between our company and external auditors.

This role is open in San Francisco New York City or Remote locations.

Unsure that you check all the boxes You should still apply! Well review your application for other opportunities. Were always on the lookout for talented people and were committed to developing each employees career with over 1800 training classes offered every year.

The impact youll make:

• Audit management: Serve as the primary point of contact for external auditors translating technical details into clear simple language for internal teams. Youll immediately take ownership of the upcoming SOC 2 Type II audit gathering necessary documentation and explaining our security measures.
• Risk assessment: Help identify and reduce security and compliance risks with a focus on product-related issues and external systems. Youll identify how high-level risks such as data leakage from AI tools can become a real problem.
• Process improvement: Find ways to make our compliance processes more efficient ideally using automation and modern compliance platforms like Vanta.
• Threat management: Oversee and track timely fixes for vulnerabilities identified by tools like Orca Security and ensure they are resolved within our deadlines.
• Incident response: Help guide the team through the process of responding to security incidents ensuring we have the right logging and monitoring systems in place with Datadog. You will act as a project manager to make sure follow-up actions and solutions are completed.
• Regulatory compliance: Provide technical knowledge to implement and enforce legal requirements ensuring our systems comply with regulations such as GDPR and CCPA.

Skills youll bring:

• Bachelors degree in computer science engineering or equivalent experience.
• 3-5 years of experience in security operations or governance risk and compliance (GRC).
• You have successfully led multiple SOC 2 Type II audits. Bonus points if you have experience with an ISO 27001 audit.
• Experience with risk assessments designing and testing controls and managing remediation efforts.
• Familiarity with risk assessment methods and a solid understanding of how to automate routine tasks.
• You can manage competing priorities and keep complex projects on track.
• You can explain audit findings and technical security concepts to both executives and engineers without causing confusion.

Benefits and Perks:

• Competitive salary and equity
• 100% employee coverage for medical dental and vision premiums
• Short and long term disability benefits at no cost to the employee
• Basic life and AD&D insurance at no cost to the employee
• 401K Plan (Pre-tax and Roth)
• 4 weeks of paid time off and work/life balance
• Up to 12 weeks of paid family leave (care for a family member bond with a new child etc.)
• Up to 6 weeks of paid disability leave (up to 12 weeks for pregnancy disability leave)
• Join a community of fellow Rollers as a member of one of our Employee Resource Groups
• Ample opportunities to volunteer with local organizations with NextRoll Gives Back
• For additional benefits not mentioned visit our Careers page

Additional Information:

Minimum salary of $112833 to maximum salary of $167198 equity benefits.

The range provided is NextRolls reasonable estimate of the base compensation for this role. The actual amount will be based on job-related and non-discriminatory factors such as location experience training skills and abilities. Consult with your Recruiter during the initial call to determine a more targeted range based on these job-related factors.

About NextRoll:

NextRoll is a leading marketing technology company that empowers businesses to drive sustainable growth while building trusted connections with their audiences. Built on nearly two decades of AI and data expertise NextRoll delivers its solutions through AdRoll its flagship brand and connected advertising platform. The AdRoll platform brings together two powerful offerings: the AdRoll product which helps brands generate awareness deepen engagement and drive measurable revenue through AI-powered multi-channel campaigns; and AdRoll ABM a full-funnel account-based marketing product that unifies buyer insights predictive AI and multi-touch advertising to accelerate pipeline and revenue for B2B teams. Together these solutions give marketers the clarity efficiency and performance they need to grow with confidence. NextRoll is a privately held company headquartered in San Francisco CA.

We are committed to building diverse teams of Rollers and are proud to be an equal opportunity employer. Learn more about our DEI impact via our DEI Annual Report on our Culture page. All applicants will receive consideration without regard to race color ancestry sex religion gender gender identity or expression sexual orientation marital status national origin citizenship genetics disability age veteran status or other characteristics. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process to perform essential job functions and to receive other benefits and privileges of employment. To request reasonable accommodation contact