Security Engineer

iSeatz drives enduring brand loyalty through exceptional, connected experiences. Our digital commerce and technology solutions enable travel and lifestyle bookings for the world’s leading brands in financial services, travel, and hospitality, including American Express, IHG Hotels & Resorts, Qantas, and more. 

We have a history of long-term trusted relationships and innovation that drives tangible value to our customers through a customizable, scalable, and secure platform, a global third-party marketplace, and loyalty integration. Our proprietary platform processes over $9B per year in transactions.

We aspire to put our customers at the heart of every decision and exceed their expectations with best-in-class solutions and business-value innovations.

The Security Engineer reports to the Information Security Manager and works closely with Security, DevOps, Engineering, IT, and Compliance teams to design, build, operate, and continuously improve the technical controls that protect iSeatz systems, applications, and data. This is a hands-on engineering role focused on secure AWS environments, automation, detection and response capabilities, and practical risk reduction across a cloud-native platform.

In this role, you will translate security requirements into durable technical solutions, help engineering teams ship securely, and improve the visibility and resilience of the services our customers depend on.

• Engineer and maintain security controls across AWS accounts and services, including identity, logging, monitoring, network security, encryption, and configuration assurance.
• Develop, review, and improve Infrastructure as Code for security controls and cloud infrastructure. Work within existing IaC workflows and help make secure patterns repeatable for engineering teams.
• Operate and improve the SIEM, including log source onboarding, detection content, alert tuning, investigation support, dashboards, and use cases aligned to real threats and business risk.
• Administer and strengthen identity and access management controls across the identity provider, cloud environments, and critical SaaS platforms, including SSO, MFA, lifecycle automation, privileged access, and access reviews.
• Maintain and enhance intrusion detection and prevention capabilities across cloud, endpoint, and network environments. Investigate meaningful detections and partner on containment and remediation.
• Own key portions of the vulnerability management lifecycle: asset coverage, scanning, validation, prioritization, remediation tracking, exception support, and executive or technical reporting.
• Partner with Engineering and DevOps to secure CI/CD pipelines, application dependencies, secrets, container images, Kubernetes or ECS workloads, and runtime environments.
• Build security automation, integrations, and tooling using scripting and APIs to reduce manual effort, improve evidence quality, and increase response speed.
• Support security incident response by conducting technical investigation, collecting evidence, coordinating remediation, and improving controls after incidents and exercises.
• Perform technical security reviews of infrastructure, architecture, applications, and configuration changes. Document findings, recommendations, standards, and operational runbooks clearly.
• Stay current on cloud threats, attack techniques, and defensive capabilities, then apply that knowledge in ways that improve iSeatz security without creating unnecessary friction.

• 3+ years of hands-on experience in security engineering, cloud engineering, systems engineering, DevSecOps, or a closely related technical role.
• Hands-on experience securing AWS environments, with a working understanding of core AWS security services and multi-account or multi-environment operations.
• Professional experience using Infrastructure as Code to build or manage cloud infrastructure and security controls. 
• Hands-on experience with a SIEM or cloud security analytics platform, including log analysis, detection engineering or alert tuning, investigation workflows, and reporting.
• Hands-on experience with an identity provider and identity security controls, such as SSO, MFA, SCIM or lifecycle management, access governance, and privileged access.
• Experience operating or supporting IDS, IPS, EDR, NDR, WAF, or comparable detection and prevention technologies, with a strong grasp of network security fundamentals.
• Experience with vulnerability management tools and processes, including scanning, asset inventory, prioritization, remediation tracking, validation, and risk-based communication.
• Working knowledge of containerization and cloud-native workload security, including Docker, container registries, image scanning, and orchestrated workloads such as Kubernetes, ECS, or EKS.
• Ability to automate tasks and integrate tools using Python, Bash, PowerShell, JavaScript or TypeScript, APIs, and version-controlled workflows.
• Strong analytical, troubleshooting, and communication skills. You can work across technical and nontechnical teams, explain risk plainly, and move work from finding to resolution.
• Ability to work independently while collaborating effectively across Security, Engineering, DevOps, IT, and Compliance.

• Hands-on AWS CDK experience, especially building reusable security guardrails and secure-by-default patterns in TypeScript or Python.
• Deep penetration testing experience across web applications, APIs, cloud environments, internal networks, or adversary simulation, including the ability to validate remediation and explain practical exploit paths.
• Experience securing Kubernetes or EKS at scale, including admission controls, workload identity, network policies, secrets management, runtime detection, and image supply chain security.
• Experience with security automation, SOAR, case management, or custom integrations that enrich, prioritize, or respond to alerts.
• Experience in a PCI DSS, SOC 2, or other regulated environment, including translating control requirements into technical evidence and sustainable engineering practices.
• Experience with application security tools and practices, including SAST, DAST, SCA, secrets scanning, threat modeling, or secure code review.
• Relevant security or cloud certifications such as AWS Certified Security Specialty, CISSP, CCSP, GIAC.

This role is remote and can be located anywhere inside the continental United States. iSeatz is a New Orleans-based company with Central Time Zone business hours, but feel free to work from your home office, from the beach, or from the cottage you rented for the summer!

iSeatz has been honored as an Inc. Magazine Best Workplace for the past three years — recognition based on our commitment to transparency, trust, and open communication, as well as our efforts to foster growth for our team members beyond their current roles and responsibilities.

We trust our team members to use their expertise and creativity to deliver high-quality results — without micromanagement — and support them in building careers that are as dynamic and multifaceted as the work we do.

We believe there's no one-size-fits-all approach to engagement or collaboration. That’s why we strive to provide the tools, autonomy, and support employees need to succeed — while delivering exceptional products and services to our customers.

We recognize that great work deserves meaningful support. At iSeatz, we provide competitive compensation and a comprehensive suite of benefits to match. Our team members enjoy robust health insurance, a 401(k) plan with company matching, generous paid time off, and up to eight weeks of paid parental leave for eligible caregivers. We’re a remote-first company that values flexibility and autonomy, and we invest in continuous learning with an annual professional development allowance. Whether you're growing your skills, your family, or your impact — we’re here to support what’s next.

We are committed to building and maintaining a culture of support, awareness, and sensitivity about the importance and impact of our differences and leverage these differences to build a stronger iSeatz. 

If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact the People Operations Team at humanresources@iseatz.com.

At iSeatz, we're building a team of bold thinkers, innovative builders, and thoughtful collaborators — people who are excited to make an impact, grow their careers, and help shape the future of travel and loyalty tech.

If you're energized by meaningful work, passionate about creating exceptional experiences, and ready to bring your unique perspective to a team that values trust, growth, and transparency — we can't wait to meet you.