Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Operations Engineer role.
Rezi rewrites your resume against Tereina's job description. Free.
Tailor your resume to this Security Operations Engineer role.
Rezi rewrites your resume against Tereina's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Operations Engineer posting at Tereina — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security Operations Engineer posting at Tereina — free, in seconds.
About the Role
The Security Operations Engineer will be part of the team that owns Tereina's daily security operations and help lead our security audit and compliance program. You will help harden our cloud and CI/CD infrastructure and work with engineering teams to maintain secure environments. You will be a point person for security operations; you will identify potential issues before they become actual issues.
Responsibilities
- Assess, triage, and resolve Security Command Center findings across GCP environments, hardening cloud infrastructure and configuration.
- Review CVEs and drive remediation efforts throughout build and runtime environments.
- Turn automated scanner findings into precise code, library, and configuration change requirements.
- Automate tools, services, and code build and inspection steps to take a finding from identification to resolution.
- Strengthen the security of build pipelines and the artifacts they produce.
- Act as the point person for security operations, spotting emerging risks early.
- Guide and evolve security practices, standards, and tooling.
- Lead audits, including SOC 2 Type II and ISO 27001 audits end to end.
- Plan and run regular internal audits and control testing.
- Serve as the primary point of contact for auditors, and support security reviews, questionnaires, and due diligence from banking partners and enterprise customers.
- Own security control framework, policies, and risk register, and automate evidence collection.
- Work with Engineering, DevOps, Compliance, and leadership across time zones to keep environments secure and embed control requirements.
Requirements
- 5+ years in security operations, security engineering, or DevSecOps, including hands-on ownership of cloud and application security in a production environment.
- Proven experience leading SOC 2 Type II and/or ISO 27001 audits and acting as the primary point of contact for external auditors, plus experience planning and running internal audits.
- Strong working knowledge of security control frameworks (SOC 2 Trust Services Criteria, ISO 27001 Annex A), including designing controls, writing policies, and preparing audit evidence.
- Hands-on experience with Java and Gradle, with the ability to turn automated fault findings into pinpointed code and library change requirements.
- Experience with vulnerability and code scanning tools such as SonarQube, GitHub Dependabot, or Amazon Inspector.
- Ability to write and maintain security tooling and automation in Node.js or Python.
- Strong working knowledge of shell scripting, Unix/Linux, and networking.
- Fluent use of modern AI assistants (e.g., Claude Code or similar) to build and maintain tooling and automation.
- Self-directed and proactive, with the judgment to prioritize risk and drive remediation to completion.
- Able to explain security findings, control gaps, and their impact clearly to engineers, leadership, auditors, and external partners — and to drive remediation across teams you don't manage.
Skills
- Cloud Security Posture Management
- Vulnerability Management
- Security Automation
- CI/CD Security
- Risk Identification
- Security Practice Leadership
- External Audit Leadership
- Internal Audit Program Management
- Auditor & Partner Communication
- Controls & Evidence Automation
- Cross-team Collaboration
- Java
- Gradle
- Node.js
- Python
- Shell Scripting
- Unix/Linux
- Networking
- AI Tooling Proficiency
Location
- Remote
Work Type
- Full-time
Experience Level
- 5+ years
Benefits
- Growth opportunities
- Impactful work
- Innovation
- Collaborative culture
About the Company
- Tereina is on a mission to revolutionize B2B payments.
- We're a well-funded, early-stage startup, supported by SAP, building cutting-edge solutions that will transform the way businesses move money.
- Our platform handles cross-border payment processing, counterparty management, bank account administration, and compliance workflows for enterprise customers worldwide.
- Our Security Operations function keeps that platform — and the money and data that move through it — secure.
- Tereina runs on Java and Spring Boot microservices on Google Kubernetes Engine, built and shipped through automated CI/CD pipelines, and operates under the security and compliance expectations of our banking partners, enterprise customers, and SOC 2.
- Security Operations finds risk across our cloud, build, and runtime environments and drives it to resolution —through automation — and owns our security audit program, from SOC 2 and ISO 27001 through internal audits and partner and customer assessments.
Equal Opportunity
- As an equal opportunity employer, we're committed to diversity, inclusion, and creating an environment where everyone can thrive.