Job Description

Island is the ideal environment for enterprise work, where security is everywhere without ever getting in the way.

The Island Enterprise Platform unifies AI enablement, network access, data protection, identity, and endpoint control into one coherent workspace—so organizations get universal visibility and control, and users get a fast, fluid, beautifully simple experience. It's not just a better way to secure work. It's a better way to work. Backed by investors like Coatue Management, Insight Partners, Sequoia Capital and Cyberstarts, and trusted by some of the largest, most respected enterprises on the planet, Island is redefining what the modern workplace can be.

Come join us in building something that's already changing how the world works, we’re always looking for world-class human beings (not resumes) to join the movement.

As a Senior Security Operations Engineer at Island, you will be the security anchor for our US operations - owning incident response, cloud security posture, vulnerability management, and FedRAMP compliance across our commercial and GovCloud environments. You will operate as the US-side peer to our global SecOps Lead, driving both day-to-day execution and longer-term improvements to how we detect, triage, and close risk across the stack.

Key Responsibilities

• Lead US-timezone incident response efforts, including triage, containment, investigation, stakeholder communication, and post-incident reviews.
• Manage and improve cloud security posture across AWS, GCP, and Azure, including Wiz findings remediation, IAM exposure, misconfiguration management, and cloud detection engineering.
• Own vulnerability management across web, infrastructure, and container environments, including prioritization, remediation tracking, and reporting.
• Drive FedRAMP continuous monitoring activities for GovCloud environments, including evidence collection, POA&M tracking, audit support, and compliance operations aligned with NIST 800-53.
• Partner with the global SecOps Lead on team strategy, tooling decisions, risk identification, and security improvement initiatives.

Qualifications

• 5+ years of experience in security operations, with hands-on depth across at least two of: incident response, cloud security posture, and vulnerability management.
• Proven incident responder - comfortable leading triage and containment under pressure, writing clear timelines, and running post-mortems.
• Solid AWS knowledge (IAM, EC2, EKS, S3, CloudTrail, GuardDuty); GCP or Azure experience a plus. Hands-on CSPM experience, preferably Wiz.
• Strong communicator across async and sync - able to translate technical findings into business risk for engineering leads and senior stakeholders.
• Scripting ability and mind-set to reduce manual overhead and build durable workflows is a plus.

Dallas, TX - US citizens only; ability to work in FedRAMP-regulated environments required.

Send us your story CV - let’s talk.

Requirements

None