Information Security Engineer IV

OpTech is a woman-owned company that values your ideas, encourages your growth, and always has your back. When you work at OpTech, not only do you get health and dental benefits on the first day of employment, but you also have training opportunities, flexible/remote work options, growth opportunities, 401K and competitive pay. Apply today!

Job Summary

The Information Security Engineer IV is responsible for administering, operating, and continuously improving enterprise code security capabilities, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), and API Security. This role supports security tooling, monitoring, automation, integrations, reporting, and developer enablement while partnering with Engineering, DevOps, and Security teams to embed security throughout the software development lifecycle.

The role requires participation in a predetermined on-call rotation and is not eligible for overtime.

Key Responsibilities

• Administer, configure, maintain, and optimize SAST, SCA, and API Security platforms.

• Monitor platform health, scan coverage, performance, and security program effectiveness.

• Analyze security findings and partner with development teams on vulnerability remediation and risk reduction.

• Provide technical support, troubleshooting, and onboarding for security tools and processes.

• Develop integrations between security platforms, CI/CD pipelines, reporting systems, and enterprise applications.

• Build automation and scripting solutions to improve security workflows and operational efficiency.

• Apply Infrastructure as Code (IaC) practices, including Terraform, to deploy and manage security tooling and infrastructure.

• Develop dashboards, metrics, and reporting to improve security visibility and support decision-making.

• Collaborate with Engineering, DevOps, and Security teams to integrate security into development workflows.

• Contribute to security tooling roadmaps, enhancements, and continuous improvement initiatives.

Required Qualifications

• Experience with SAST, SCA, and API Security technologies and practices.

• Experience supporting, troubleshooting, and administering technical security platforms.

• Experience with Terraform or similar Infrastructure as Code technologies.

• Proficiency in Python, JavaScript, or another modern programming language.

• Experience developing automation, integrations, scripts, or operational tooling.

• Knowledge of secure software development lifecycle (SSDLC) and application security principles.

• Strong analytical, troubleshooting, collaboration, and communication skills.

Preferred Qualifications

• Experience with unit testing and data-processing automation.

• Experience with AWS and CI/CD pipelines.

• Experience with Power BI or similar reporting and visualization tools.

• Windows Server administration experience.

• Familiarity with API gateways and DevOps practices.

By submitting your application, you acknowledge that recruiting technologies, including AI-assisted tools, may be used to support candidate evaluation, sourcing, matching, and communications.

OpTech is an Equal Opportunity Employer (EOE), all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteranhttps://www.optechus.com/eeo_self_identification/