Job description

What You'll Do • Drive vulnerability management and compliance (SOC 2, ISO, NIST) • Secure and automate our CI/CD pipelines and Infrastructure-as-Code (Pulumi, Helm, Python, etc.) • Protect our AWS cloud and containerized environments (Docker/Kubernetes) • Monitor systems, respond to threats, and lead incident resolution • Partner with developers to integrate AppSec (SAST/DAST, dependency scanning) into workflows • Mentor peers and foster a culture of security awareness What We're Looking For • 3+ years in security engineering, cloud, or DevSecOps • Strong AWS experience (Azure/GCP a plus) • Knowledge of IaC, CI/CD, and cloud-native security tools • Familiarity with SIEM, EDR/XDR, WAFs, and OWASP Top 10 • Excellent communicator who thrives in cross-functional teams • US-based (or eligible to work in the U.S.) • *Bonus:** Experience with Wiz, NopSec, Kubernetes security, or security certifications (CISSP, AWS Security Specialty, etc.). Why Join Black Book • Competitive pay + 401(k) match • Comprehensive health, dental, vision, life, and disability insurance • Generous PTO, parental leave, and wellness reimbursement • Hybrid flexibility + inclusive, growth-focused culture • Backed by Hearst: stability with startup-like agility Apply now and help secure the future of automotive data.

Requirements