United States onlyCompany Description
Voltus is the leading platform connecting distributed energy resources to electricity markets, delivering less expensive, more reliable, and more sustainable electricity. Our commercial and industrial customers and grid services partners generate cash by allowing Voltus to maximize the value of their flexible load, distributed generation, energy storage, energy efficiency, and electric vehicle resources in these markets.
Job Description
Are you interested in building the technical foundation of the worldwide transition to clean energy? Do you enjoy working with a highly motivated and talented team to deliver mission-critical software? Voltus is growing our Infrastructure Team to help deploy, manage, troubleshoot, and enhance our Platform and tools for its internal and external customers.You’ll help us identify our infrastructure gaps from a security perspective, create a roadmap, and work with the infrastructure/IT team(s) to close our gaps. This role splits time roughly 60% technical engineering and 40% governance, risk, and compliance (GRC).Responsibilities
Build detections and security signal pipelines in Datadog.
Serve as the subject matter expert on AWS Cloud and on-prem infrastructure security.
Define and set up AWS and on-prem Security Monitoring/Best Practices Strategy.
Act as the technical lead during security incidents, including investigation and remediation.
Improve Terraform Modules and Infrastructure as Code (IaC) to follow security best practices.
Develop and implement a vulnerability monitoring strategy and integrate it into CI/CD pipelines.
Build security automation using Python, scripting, and APIs.
Partner with Infrastructure on AWS security engineering, including IAM, KMS, and network segmentation.
Operate SOC 2 Type 2 evidence collection and audit response.
Drive ISO 27001 implementation work, including risk assessments and control mapping.
Ensure infrastructure compliance with regulatory requirements.
Run vendor and subprocessor risk reviews.
Respond to customer security questionnaires and external inquiries.
Mentor and enable other team members to improve their security posture.
4–7 years of security engineering experience, ideally at a SaaS or remote-first company.
Software development experience with Go or Python.
Proven AWS Security Experience (IAM, KMS, VPC, CloudTrail, GuardDuty).
Direct experience supporting a SOC 2 Type 2 audit cycle.
Familiarity with compliance requirements such as ISO 27001, HIPAA, and GDPR.
Experience with IaC tools like Terraform and containers such as Docker.
Proficiency with monitoring and observability tools like Datadog or Prometheus.
Strong focus on risk awareness and knowing when to make fast versus slow decisions.
Security certifications such as CISSP, AWS Security Specialty, or GIAC are a plus.
