SecOps Engineer Remote

Free Will is an award-winning, social-good startup that has partnered with 2,400+ nonprofits who support our mission while generating $13B in gift commitments for nonprofits since we were founded in 2017. We’ve been featured in the New York Times, Forbes, Oprah’s magazine, and our co-CEOs have been named to Town & Country’s “Top 50 Philanthropists” list.

All of this is because we’ve figured out how to make some powerful (but complicated!) ways to donate much easier and more accessible. Our products make things easier for the donors who want to change the world and for nonprofits doing heroic work around the planet.

We're seeking a Sec Ops Engineer to join our established security team as we continue to enhance our industry-leading security program. You'll help strengthen our robust security infrastructure and advance our cutting-edge security initiatives, including enhanced identity management, Zero Trust architecture expansion, and AI security innovations.

You'll work closely with our Director of Technology & Operations, Platform Engineering Manager, and existing security team members to maintain our SOC2 compliance, enhance our incident response capabilities, and continue embedding security excellence into everything we do. This is a hands-on role where you'll contribute to protecting our mission-critical systems and the sensitive data of millions of donors and thousands of nonprofit partners.

Free Will has set compensation and a non-negotiation policy for fairness reasons (we don't think that an individual's pay should be determined by how comfortable they are negotiating). As a result, we like to be transparent and up front about the compensation. When we make an offer, we provide multiple options so that employees can choose between compensation packages that prioritize salary or stock options.

The offers for this role will be between $125,000 - $145,000 and will include equity and benefits.

Please note: We are reviewing applications on an on-going basis. At this time, we are prioritizing candidates with both Sec Ops experience and experience working in a start up company.

Security Operations & Incident Response (40%)

• Enhance our security monitoring and incident response processes across our cloud infrastructure
• Support our vulnerability management program and coordinate remediation efforts
• Optimize and maintain our existing security tooling (SIEM, EDR, cloud security platforms)
• Refine security runbooks and incident response procedures
• Support security investigations and forensics when needed

Security Enhancement Initiatives (40%)

• Expand our Single Sign-On (SSO) implementation to additional systems
• Advance our Zero Trust architecture to the next level
• Evaluate and integrate AI-specific security controls into our existing framework
• Enhance automation of security processes and controls
• Continue modernizing our authentication and authorization systems

Compliance & Partnership Support (20%)

• Support the Director of Technology & Operations with our ongoing SOC2 compliance program
• Lead vendor security assessments for third-party integrations
• Provide technical security expertise on customer calls
• Collaborate with our security team during peak periods
• Maintain and update security policies and procedures
• Support strategic security initiatives as needed

• 5+ years in security operations, security engineering, or related roles
• Deep experience with cloud security in AWS
• Hands-on experience with identity management and SSO systems
• Track record of managing security incidents from detection to resolution
• Experience with security compliance frameworks (SOC2, ISO 27001, etc.)

Technical Skills

• Proficient with security tools: SIEM, EDR, vulnerability scanners, cloud security platforms
• Strong scripting abilities (Python, Bash, or similar)
• Experience with infrastructure as code (Terraform, Cloud Formation)
• Understanding of Dev Sec Ops  practices and CI/CD security
• Knowledge of Zero Trust principles and implementation

The Person We're Looking For

• Operates with high autonomy while knowing when to escalate or collaborate
• Balanc…