Security Engineer

About Ovative Group:

Ovative Group is an independent full-funnel media measurement and creative firm transforming how brands grow. We partner with leading names like American Eagle Best Buy Dominos The Home Depot Polaris and UnitedHealth Group to build smarter media and measurement programs that drive real profitable growth.

About the Role:

Ovative Group is seeking a Security Engineer to join our growing Information Security team. Reporting to the Lead Security & Cloud Engineer this role owns the day-to-day execution of security operations threat and vulnerability management and security tooling and plays a hands-on role in securing our adoption of AI across the business. The ideal candidate is hands-on detail-oriented and comfortable operating across both cloud-native and enterprise productivity environments (GCP Azure M365 AWS).

Responsibilities:

Security Operations and Incident Response

• Monitor security tooling and alerts across endpoint cloud and network environments; triage and escalate as appropriate

• Perform log analysis and investigation to identify and scope the impact of security incidents

• Support incident response and business continuity plan execution including tabletop exercises and post-incident reviews

• Support managed detection and response (MDR) partner relationships and act on partner recommendations

• Participate in root cause analyses for security findings; identify contributing factors and implement permanent fixes

Threat and Vulnerability Management

• Monitor threat intelligence feeds to understand the current threat landscape and turn findings into action for the team

• Operate and monitor vulnerability scanning tools; track and remediate findings or document exceptions

• Prioritize remediation efforts based on risk scoring and asset criticality

• Coordinate with engineering and IT teams to ensure timely patching and hardening of cloud and endpoint systems

• Support penetration testing engagements: coordinate logistics track findings and drive remediation to closure

AI Security Engineering

• Help buildsecure and monitor the infrastructure behind our AI adoption including MCP servers agent policy and proxy services and connector integrations

• Review harden and productionize AI-assisted and internally built applications and automations before they reach production data

• Perform the technical side of AI vendor and tool evaluations in partnership with our Security Analyst including secure configuration integration review and onboarding

• Implement guardrails and monitoring for AI tools and agents including logging data protection and identity for non-human actors

• Stay current on AI security research and practice (OWASP GenAI Security prompt injection agentic risks) and recommend tooling and secure design patterns

• Provide hands-on guidance and training for teams building and working with AI tools agents and frameworks

Security Tooling Automation and Cloud Operations

• Administer and tune security tools including SIEM vulnerability scanners EDR and cloud security posture management (CSPM) platforms

• Build and maintain automation and scripts (Python Bash or similar) to streamline security operations and reduce manual toil

• Support day-to-day cloud operations and IAM hygiene across GCP and Azure in partnership with our cloud security and infrastructure engineers

• Document and provide evidence for the technical controls you operate in support of SOC 2 and client security audits

• Evaluate and recommend new security tools in partnership with the Head of Information Security

Skills and Qualifications:

• Two-year or four-year degree in computer science information security technology or related field; or 3 years of equivalent experience

• 25 years of experience in security operations security engineering site reliability engineering or a similar hands-on role title and level will be commensurate with experience

• Experience with vulnerability management tools and remediation workflows

• Working knowledge of GCP and/or Azure security services and configurations

• Familiarity with IAM secrets management and network security concepts in cloud environments

• Proficiency in shell scripting and Python TypeScript Go or similar programming languages

• Hands-on experience using generative AI tools in daily work and a strong interest in securing them

• Experience with modern DevSecOps practices and technologies (GitHub Jira Confluence)

• Experience operating across cloud-native security and enterprise productivity environments (GCP Azure M365)

• Strong analytical and problem-solving skills; high attention to detail

• Ability to communicate and champion security concepts and practices clearly to developers data engineers data scientists and technical and non-technical leadership

Preferred Qualifications

• Security certifications (CCSP CEH GSEC GCIH etc.)

• Experience with IaC tools such as Terraform Ansible or Puppet

• Hands-on experience with CSPM (Wiz Lacework etc.) and SIEM platforms

• Experience with containerization technologies (Kubernetes Docker)

• Hands-on experience with MCP servers agent frameworks or other applied AI security work

• Familiarity with AI security frameworks and guidance (OWASP GenAI Security NIST AI RMF)

• Experience securing personal information or other regulated data

• Exposure to security administration of BigQuery Databricks or similar data platforms

Pay Transparency:

At Ovative we offer a transparent view into three core components of the total compensation package: Base Salary Annual Bonus and Benefits.

For our Senior Analyst positions including the position of Security Engineer our compensation range is from $75000 to $93000 on an annualized basiswhich is inclusive ofan annual bonusopportunityof 15% of base salary.

Working at Ovative Group:

We provide strong competitive holistic benefits that understand the importance of your life inside and out of work.

At Ovative culture isnt a buzzwordits the reason weve been named a Top Workplace for ten years running. We lead with trust transparency and a commitment to doing the hard work others avoid.

We offer flexibility. Youll work from our Minneapolis Chicago or New York office on set days each week and an option to work remote on others.

Our open floor plan reflects our open communication and flat structurewhere interns collaborate with VPs analysts partner with senior leaders and our CEO engages with every team member. Together we create an environment where smart driven people can do their best work and support one another in the process.

Were equally committed to inclusion and belonging. Ovative fosters a workplace where everyone can participate and thriveregardless of ethnicity gender sexual orientation gender identity or expression or other protected class status. Our benefits and policies reflect that commitment from inclusive medical leave coverage for same-sex spouses to equitable care and support for all families.

Benefits:

We strive to hire and retain the best talent by offering fair competitive compensation a meaningful bonus program and excellent health coverage. When the company performs well we all benefit.

Some tangible benefits and amenities we enjoy:

• Access to all office spaces in MSP NYC and CHI

• Frequent paid travel to our Minneapolis headquarters for company events team events and in-person collaboration with teams

• Generous paid vacation policy

• 401k match program

• Top-notch health insurance options inclusive of same sex partners

• Family formation benefits including reimbursement options for fertility pregnancy and parenting needs

• Monthly stipend for your mobile phone and data plan

• Sabbatical program

• Charitable giving via our time and a financial match program

• Shenanigans Day

Additional information can be found at Ovatives Career Page.

The details of the benefits are covered by applicable plan documents for group benefits and by company policies where a plan document does not apply.

Working at Ovative wont be easybut if you like challenging hard work driving results and being surrounded by the best talent it has the potential to be the most rewarding job youll ever have. If you think you can make us better we want to hear from you!

EEO & Accessibility:

Ovative is an Equal Opportunity Employer committed to a respectful inclusive workplace for all. Applicants receive consideration without regard to legally protected characteristics (e.g. color religion creed national origin sex pregnancy childbirth and related conditions sexual orientation gender identity/ gender expression gender identity age physical or mental disability marital/ status familial status military or veterans status genetic information status with regard to public assistance and any other status protected under applicable law).

We provide reasonable accommodations consistent with the Americans with Disabilities Act and applicable state law to qualified applicants and employees with disability unless doing so would create an undue hardship.

If you need assistance or accommodation at any stage of the application or interview process due to a disability please contact us at

Application Details and Process:

Applicants must be legally authorized to work in the United States for any employer on a full-time basis without current or future need for visa sponsorship. Ovative is unable to sponsor or take over sponsorship of an employment visa for this compliance with federal law all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification documentation upon hire.

Open Until Filled or Otherwise Withdrawn:

We encourage interested candidates to apply early. The position will remain open for at least 10 business days from the first day of posting. After this time if the position has not been filled the posting will remain open until the position is filled or until the posting is otherwise closed or withdrawn for business reasons.