SecOps Engineer

Position Summary

The Security Operations Engineer is responsible for supporting and advancing Midwest Tape’s security operations program with a primary focus on AWS cloud security, AI and emerging technology security, and broader security operations activities. This role is accountable for protecting AWS-hosted infrastructure and services, strengthening monitoring and incident response capabilities, improving security automation, and promoting the secure use of AI and large language model technologies across the organization.

Core Responsibilities

• Maintain effective security monitoring and incident response capabilities across environments.
• Help automate processes and improve our security infrastructure.
• Ensure the secure use of AI and LLM technologies across the organization.

Primary Duties and Responsibilities

• AWS Lead:
  • Supporting AWS security operations across a multi-account organization, including monitoring, detection, investigation, containment, and response.
  • Secure core AWS services including IAM, SCPs, EC2, EKS, S3, RDS, Lambda, CloudTrail, GuardDuty, Security Hub, Config, VPC, SGs, WAF, Shield, among other services.
  • Design and maintain least-privilege architectures, credential management, cross-account role access, and identity governance controls.
  • Implement new solutions and migrate existing solutions through Infrastructure as Code (IaC), specifically, Terraform.
  • Conduct cloud vulnerability and misconfiguration management, prioritizing remediation based on risk, exploitability, and business impact.
  • Automate cloud security operations when and where the use case best suits.
  • Develop documentation and maintain incident response playbooks, escalation procedures, and response automations.
• AI Partner:
  • Collaborate with DevOps and engineering teams to integrate security into CI/CD pipelines, software development, and infrastructure as code.
  • (GitHub Advanced Security, GitHub Actions).
  • Monitor emerging threats, attack techniques, and best practices related to AI, GenAI, and LLM security.
  • Implement guardrails for data privacy, access control, logging, and monitoring in AI and LLM workflows.
• General Security Operations:
  • Conduct security monitoring, detection, and incident response across cloud, on-prem, and hybrid environments.
  • Participate in an on-call rotation for security incident response.
  • Drive vulnerability management programs, prioritizing risks based on business impact.
  • Manage and tune SIEM (Security Information and Event Management), SOAR (Security Orchestration, Automation, and Response), and EDR (Endpoint Detection and Response) platforms, with emphasis on high-fidelity alerts and automation.
  • Perform threat hunting and root-cause analysis using cloud, endpoint, and application telemetry.
  • Collaborate with leadership to refine KPIs, incident response metrics, and security maturity goals.
  • Research and evaluate emerging security threats, tools, and technologies to enhance detection and response.
  • Play a supporting role across NIST functions and act as the technical backbone to turn policy and risk decisions into working security controls.
  • Mentor junior and mid-level security engineers and promote operational excellence.

Strategic Responsibilities

• Contribute to the SecOps roadmap by identifying areas for operational improvement and future capability building.
• Collaborate with InfoSec leadership to align security operations with overall risk management and compliance objectives.
• Participate in the evaluation and selection of security tools, services, and vendors.
• Define and track SecOps KPIs and SLAs to measure effectiveness and drive continuous improvement.
• Provide input into budget planning for SecOps tools, training, and headcount needs.
• Act as a subject matter expert in executive-level security discussions, audits, and compliance reviews.

About the Company

What started in 1989 as a family-owned video rental store grew into a trusted partner dedicated to helping libraries thrive. A single suggestion to sell VHS tapes (remember those?) to public libraries inspired our founder, John Eldred to start Midwest Tape LLC – and set our mission in motion. Fast forward to over 35 years later, we provide libraries across North America, New Zealand, and Australia with innovative products and equitable access to content. Backed by a passion for exceptional service and a deep understanding of library needs, we fuel libraries with unparalleled access to top-tier media content including physical media (audiobooks, DVDs, CDs, and read-a-longs) as well as our digital platform, Hoopla Digital. Hoopla, available on iOS, Android, and desktop, combines our decades of media expertise with modern technology to deliver an all-in-one experience for libraries and their patrons. With one of the strongest catalogs in the digital library space, Hoopla empowers libraries to reach patrons wherever they are. We proudly partner with our library partners and content providers to strengthen communities through access to educational resources and entertainment experiences. Since 1989, our commitment has remained the same: supporting libraries with solutions that make a difference because strong libraries build healthy communities.