Security & Compliance Engineer Redondo Beach Department Information Technology Employment Type

Security & Compliance Engineer

Department: Information Technology

Employment Type: Full Time

Location: Redondo Beach

Reporting To: Paul Polifrone, IT Director

Compensation: $140,000 - $170,000 / year

Description

We are seeking a highly skilled and detail-oriented Security & Compliance Engineer to join our team. In this role, you will be responsible for designing, implementing, and maintaining security and compliance frameworks across our IT infrastructure. You will work closely with cross-functional teams to ensure that our systems meet regulatory standards, align with industry best practices, and maintain a strong security posture.

Responsibilities

1. Security Controls: Implement, monitor, and maintain security controls across cloud, on-premises, and hybrid environments to safeguard systems, networks, and data.
2. Compliance Management: Ensure compliance with applicable regulations and standards such as NIST, CMMC, ITAR, and others relevant to our industry.
3. Security Audits & Assessments: Conduct regular security audits, vulnerability assessments, and risk analysis to identify gaps and propose remediation.
4. Security Framework Development: Develop, implement, and enforce security policies, procedures, and standards in line with industry best practices (e.g., NIST SP 800-171).
5. Incident Response: Lead the identification, investigation, and response to security incidents, ensuring timely resolution and mitigation.
6. Compliance Reporting: Prepare and present detailed reports on compliance status and security metrics to senior management and external auditors.
7. Collaboration: Integrate with IT and partner with software, Legal, and other departments to ensure security and compliance are integrated into development processes, infrastructure, and operational practices.
8. Security Awareness: Conduct security awareness training and workshops for employees to build a security-conscious culture across the organization.
9. Third-party Risk Management: Evaluate and manage security risks from third-party vendors, ensuring that their practices align with the company’s security and compliance requirements.
10. Documentation: Maintain detailed documentation for security policies, procedures, and compliance reports to ensure accountability and transparency.

Minimum Qualifications

1. Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent work experience).
2. 6 years of experience in security and compliance, particularly within a cloud or hybrid IT environment.
3. Proficiency with regulatory frameworks such as NIST 800-171, CMMC, ITAR, etc.
4. Hands-on experience with security tools like SIEM, IDS/IPS, vulnerability scanners, and endpoint protection systems.
5. Experience working with multi-site cloud platforms (AWS, Azure, GCP) and securing multi-cloud environments.
6. Solid understanding of networking protocols, firewalls, VPNs, and encryption technologies.
7. Experience with identity management, access control (IAM), and zero-trust architecture.
8. Excellent communication and collaboration skills with the ability to explain complex security concepts to non-technical stakeholders.
9. Relevant certifications such as CISSP, CISM, CEH, CISA, OSCP, or similar are highly preferred.

Preferred Skills and Experience

1. 8 years of experience in security and compliance, particularly within a cloud or hybrid IT environment.
2. Experience with compliance requirements in defense/aerospace industries.
3. Familiarity with FedRAMP and other government compliance programs.
4. Hands-on experience with security automation and orchestration.
5. Strong knowledge of risk management methodologies and governance practices.

Additional Information:
Compensation bands are determined by role, level, location, and alignment with market data. Individual level and base pay is determined on a case-by-case basis and may vary based on job-related skills, education, experience, technical capabilities and internal equity. In addition to base salary, for full-time hires, you may also be eligible for long-term incentives, in the form of stock options , and access to medical, vision & dental coverage as well as access to a 401(k) retirement plan .

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here .#J-18808-Ljbffr