Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this SecOps Engineer role.
Rezi rewrites your resume against CSC Generation's job description. Free.
Tailor your resume to this SecOps Engineer role.
Rezi rewrites your resume against CSC Generation's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the SecOps Engineer posting at CSC Generation — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the SecOps Engineer posting at CSC Generation — free, in seconds.
About the Role
The threat landscape has shifted, with autonomous AI agents probing infrastructure at machine speed. This role requires an engineer to build AI-aware defenses across cloud environments and codebases proactively. As SecOps Engineer, you will write code, establish pipelines, and integrate with observability stacks to transform raw signal into actionable security insight across the portfolio's AWS infrastructure. Within 6-12 months, you will have production security tooling running in CI/CD, real-time threat detection correlated through ELK and Grafana, and AI-powered perimeter monitoring protecting the cloud footprint. This is a lean team where you will own a lot, move fast, and make decisions with full end-to-end responsibility.
Responsibilities
- Build and run analysis tools that scan existing codebases for security vulnerabilities and produce clear, actionable remediation guidance for engineering teams.
- Integrate automated security scanning into GitHub Workflows (CI/CD) for continuous review of every commit and PR.
- Design and build threat detection tools that correlate signals with observability platforms (ELK, Grafana) to identify active security threats in real time.
- Build or deploy AI-powered tools to monitor the cloud perimeter (AWS) for anomalous or malicious activity and drive automated or semi-automated response.
- Own the full lifecycle of security tooling, from prototype to production, including monitoring for reliability and false-positive rates.
- Partner with engineering teams to help them understand and act on findings, and iterate on tooling based on their feedback.
- Translate security findings into specific, understandable remediation steps for engineers.
Requirements
- Hands-on experience with AWS infrastructure (IAM, VPC, networking/security groups, common compute/storage services) and common misconfigurations or attacks.
- Experience working with GitHub Workflows / GitHub Actions and building CI/CD-integrated tooling.
- Practical experience using AI/LLM tools to build analysis or automation tooling (e.g., code review, log analysis, anomaly detection, or classification).
- Strong understanding of common application and infrastructure vulnerability classes (OWASP Top 10, cloud misconfigurations, supply chain risks).
- Comfort working with observability/monitoring platforms such as ELK and Grafana, including building dashboards, alerts, or custom data pipelines.
- Solid software engineering skills, comfortable writing production-quality code (Python, Go, or similar) to build tools.
- Ability to communicate security findings clearly and translate vulnerabilities into concrete remediation steps.
- Willingness and ability to attend a mandatory in-person interview.
- Must share a valid LinkedIn profile URL or provide a credible reason and alternative evidence of professional background.
Skills
- AWS infrastructure
- IAM
- VPC
- Networking/security groups
- Common compute/storage services
- GitHub Workflows
- GitHub Actions
- CI/CD
- AI/LLM tools
- Code review
- Log analysis
- Anomaly detection
- Classification
- OWASP Top 10
- Cloud misconfigurations
- Supply chain risks
- ELK
- Grafana
- Python
- Go
- Offensive security experience
- Penetration testing
- Red teaming
- Exploit development
- SIEM/SOAR platforms
- Infrastructure-as-code
- Terraform
- CloudFormation
- Container security
- Kubernetes security
Location
- Houston, TX (Hybrid)
- Toronto, ON (Hybrid)
Work Type
- Hybrid
- Full-time
Experience Level
- Mid-level
Education Level
- OSCP
- GCIH
- AWS Security Specialty
Benefits
- Paid time off policies
- 401(k) match (US)
- Medical/dental/vision (US)
- Variety of supplemental policies (US)
- Employee discounts across portfolio of brands (US)
- RRSP match (Canada)
- Medical, dental, and vision coverage (Canada)
- Variety of supplemental benefit options (Canada)
About the Company
- CSC Generation is the AI-native holding company re-engineering omnichannel retail.
- We acquire iconic brands and transform them with Genesis, our operating platform combining a Data Fabric, Automation Engine, proprietary tools, and shared services to modernize operations, elevate customer experience, and expand margins.
- With $1B+ in revenue across 13 brands, our portfolio includes Sur La Table, Backcountry, One Kings Lane, and others that serve as real-world innovation labs.
Equal Opportunity
- CSC Generation is an equal opportunity employer. All qualified applicants will receive consideration without regard to any characteristic protected by law.
- If you need an accommodation during the application process, contact hrbenefits@cscshared.com.
- Employment is contingent on a background check, including verification of prior employment dates.
- This position is not open to and cannot be filled by a B.C. Resident.