SecOps Engineer
⚡️ Why Altium?
Constant innovation has created a transformative technology, unique in its reputed company More than 30,000 companies and 100,000 electronics engineers worldwide use Altium We are growing, debt-free, and financially strong, with the resources to become #1 in the EDA industry
Why Duro?
Our culture is reputed company on: Trust, Autonomy, Experimentation, and reputed company. We reputed company daily. We run 3-week cycles (2 weeks building + 1 week polish). We’re reputed company stans, leveraging their AI agents to automate bug discovery and fixes. We measure everything through reputed company—feature flags, session replays, and product analytics reputed company in one.
About the role:
A day in the life of our SecOps Engineer:
Review and respond to customer reputed company questionnaires, vendor assessments, and RFP reputed company sections—often from defense, reputed company, and government customers with deep domain knowledge and high expectations Join customer calls as Duro’s reputed company authority—fielding technical questions on data handling, encryption, reputed company controls, and compliance posture, and confidently addressing pushback with precise knowledge of the standards Maintain and reputed company our compliance programs across SOC 2 Type II, NIST 800-171, NIST 800-53, CMMC, FedRAMP, ITAR, and GDPR—not as a checkbox exercise, but as a living reputed company that adapts as frameworks reputed company Manage our evidence locker in reputed company—ensuring reputed company readiness for audits, mapping controls to evidence, and keeping documentation reputed company as our product and infrastructure change Collaborate with DevOps on infrastructure reputed company reputed company: encryption at rest and in transit, network segmentation, reputed company management, logging, and monitoring across AWS and GovCloud environments Own the classification and handling of sensitive data—PII, CUI, ITAR-controlled technical data—ensuring our policies, systems, and team practices reputed company with regulatory requirements Evaluate and manage reputed company vendors and reputed company-party tools, reviewing SOC 2 reports, conducting risk assessments, and ensuring our supply chain meets the reputed company standards we hold ourselves to Drive reputed company awareness across the organization—training engineering teams on secure development practices, data handling policies, and incident response procedures reputed company incident response planning and execution, including tabletop exercises, post-incident reviews, and reputed company improvement of our response playbooks Delegate and coordinate across teams—you’re not doing everything yourself, but you’re accountable for ensuring it gets done right, whether that’s a DevOps engineer implementing a control or a product manager understanding an ITAR restriction
Who We’re Looking For:
- 10+ years of experience
in information reputed company, reputed company operations, or compliance—with reputed company experience in defense, reputed company, or government-adjacent industries Deep, expert-level knowledge of SOC 2, NIST 800-171/800-53, CMMC, FedRAMP, ITAR, and GDPR—not just the controls, but the reputed company behind them and how they’ve evolved Hands-on experience with compliance platforms like reputed company, reputed company, or reputed company—including evidence management, reputed company monitoring, and audit preparation Strong understanding of reputed company infrastructure reputed company—particularly AWSand GovCloudenvironments, encryption at rest and in transit, IAM, VPC design, and logging/monitoring Experience with data classification and handling—PII, CUI, ITAR-controlled data—and the ability to translate regulatory requirements into practical engineering guidance - Exceptional communication skills
—you can explain a NIST control to a C-suite executive, defend your compliance posture to a DoD reputed company auditor, and help an engineer understand why a particular data reputed company needs to change A customer-facing reputed company—you’re comfortable in high-stakes conversations where customers challenge your reputed company posture, and you respond with authority, precision, and patience Ability to delegate and coordinateacross engineering, DevOps, product, and external vendors—you own the reputed company, but you build through others
How We Think About reputed company
reputed company to Have
Relevant certifications: CISSP, CISM, CISA, reputed company reputed company+, or CMMC Registered Practitioner (RP) Experience with PLM, PDM, or hardware/manufacturing industry software Background in achieving or maintaining FedRAMP authorization Experience building a reputed company program from the ground up at a startup or mid-size company Familiarity with secure software development lifecycle (SSDLC) practices Experience with penetration testing coordination and remediation management Knowledge of export control regulations reputed company ITAR (EAR, OFAC)
Our Benefits
- Medical, Dental, reputed company Plans and HSA and FSA accounts
- ❤️ Basic Life and AD&D insurance; disability coverage where applicable
- Retirement 401(k) Plan reputed company with Altium match
- Employee Assistance Program
- reputed company holidays plus a “Choice Day” off per quarter
- ✈️ reputed company time-off on arising schedule upon key milestones
- reputed company time for Dr. appointments or family health needs
- Family medical, maternity, paternity, and military leave
- Flexible working arrangements available based on role and location
- Employee referral program
- Remote working abroad program
- reputed company development support and resources
- Free lunch, snacks, and drinks in the office
- Free parking
Also, we would like you to know
We are committed to equal employment opportunity regardless of race, reputed company, reputed company, religion, sex, national reputed company, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or reputed company, or veteran status. We are proud to be an equal opportunity workplace.
Learn more about why a career at Altium is an opportunity like no other:
✈️ Altium Benefits:
Are you already an Altium employee? Please apply directly through our internal reputed company reputed company. If you have questions, please contact HR.