Top of page

Job intelligence

Senior Staff Infrastructure & Security Engineer

CivilGrid

Location: Boston Work arrangement: Region-restricted remote Posted: November 5, 2026 Freshness: Very fresh Source check: Observed very recently
Disclosure2 of 5 core facts statedReview uncertainties
Last source observationObserved very recentlyObservation is not employer confirmation.
Application destinationremoteOK.comReview the application route and source evidence in the full report below.

Before relying on the listing: Confirm Compensation and Application closing time with the employer or source. See verification questions

Executive opportunity brief

The decision in one screen

A compact evidence-first read of compensation, flexibility, mobility and what still needs verification. No universal quality score is used.

Compensation positionPay not disclosed
Work flexibilityRegion-restricted remoteBased only on stated location/work-arrangement evidence.
Decision evidence2 of 5 core facts knownThis listing states fewer core decision facts than the median role in the current sample.
Mobility evidenceSponsorship not establishedUnknown evidence is not treated as unavailable.
Current alternatives370 current same-family rolesCurrent HPJ inventory, not the whole labor market.
Negotiation readinessNegotiation evidence available: current same-currency market context.Use the private Offer & Negotiation Lab below if an offer arrives.
Watch closely: Comparable advertised compensation is incomplete

Fast read

Opportunity DNA

The available details do not point to a single standout advantage yet. The clearest issue to weigh is the pay picture is incomplete.

PayNot disclosed

A financial comparison will need the approved compensation range.

FlexibilityLocation limits visible

Geographic eligibility is restricted to a country or region.

Entry pathMixed requirements

Some access and qualification signals are clear, but the overall entry path is neither unusually open nor unusually restrictive.

MobilityNot established

Sponsorship and relocation support are not clear from the current listing.

ApplicationSome process detail

Part of the application route can be assessed, but the full external process may contain additional steps.

TraceabilityCurrent source traceable

At least one recent enabled source can still renew this vacancy.

This fingerprint summarizes what is clear, constrained or still unanswered in the current listing. It is a reading aid, not an overall job score.

Decision evidence check

2 of 5 core facts stated

This checks whether the listing states the facts that commonly change an employment decision. It measures disclosure completeness, not whether the opportunity is good or bad.

Facts already stated

  • Work arrangement
  • Advertised location

What to verify next

  • Compensation: What is the approved compensation range, and what portion is guaranteed base pay rather than variable compensation?
  • Application closing time: Is there a firm application deadline, a rolling review window or no stated closing date?
  • Employment type: Is this permanent, fixed-term, contract, temporary, freelance or another employment arrangement, and which benefits apply?

Advertised location is not proof of work authorization, sponsorship, or legal eligibility. Unknown information is not a negative score; verify those questions separately.

Decision levers

What could make or break the fit?

Reasons to look closer

Nothing stands out strongly enough yet to call a clear advantage. The role may still be attractive for reasons the listing does not spell out.

Trade-offs to weigh

  • The pay picture is incomplete: No usable salary range is stated, so a meaningful financial comparison is not possible yet.
  • Location rules could change the fit: Geographic eligibility is restricted to a country or region.

Questions worth asking before you invest more time

  • Ask for the approved compensation range before comparing this opportunity financially.
  • Confirm whether a degree is actually required, preferred, or replaceable with equivalent experience.
  • Confirm the actual minimum experience requirement rather than assuming preferred background is mandatory.
  • Ask whether visa sponsorship is available before investing significant time in the application.

These questions come from details the listing leaves open. An unanswered point is not treated as a disadvantage.

Opportunity neighborhood

Keep your options open

These live roles sit close enough to this opportunity to make useful comparison points. Look across several employers before deciding what pay, flexibility or access trade-offs you are willing to accept.

Senior Web Application Security Engineer

EPAM Systems · Anywhere in the World, 🇺🇸 United States of America, 🇦🇲 Armenia, 🇬🇪 Georgia, and 🇧🇾 Belarus

Salary not disclosed Worldwide remote 4/5 core facts

Why it is nearby: Same seniority band · Similar work arrangement · Recently posted

(Senior) IT Security Engineer (m/w/d)

noris network AG · Berlin

Salary not disclosed Remote — restrictions unclear 2/5 core facts

Why it is nearby: Same seniority band · Similar work arrangement · Recently posted

Security Architect

European Dynamics · Strasbourg, France

Salary not disclosed On-site / hybrid 3/5 core facts

Why it is nearby: Same seniority band · Recently posted · 3 of 5 core decision facts stated

Different angle: Different work arrangement

Senior Security Architect

Anaplan · London

Salary not disclosed On-site / hybrid 2/5 core facts

Why it is nearby: Same seniority band · Recently posted

Different angle: Different work arrangement

This neighborhood is drawn from current inventory in the same broad occupation. Similarity is based on explicit listing facts; missing details do not count against a job.

Role market context

How much current choice is visible around this kind of work?

This compares the vacancy with current High Paid Job inventory in the broad Cybersecurity roles family. It describes visible choice and disclosure, not future demand or career quality.

Current visible roles370

200 most recent current roles sampled for the disclosure measures below.

Employers represented149

Distinct employers in the bounded current sample, not an estimate of all employers hiring in the market.

Decision-ready disclosure27%

Current sampled roles stating at least four of the five Core Decision Facts.

Compensation stated41%

Requires a numeric amount, explicit ISO currency and supported pay period.

Work arrangement stated78%

Listings with explicit enough remote, hybrid or on-site evidence to classify.

Stated closing time32%

Missing deadline evidence remains unknown and is not interpreted as an open-ended application window.

Disclosure comparison: This listing states fewer core decision facts than the median role in the current sample. This listing: 2/5 · sample median: 3.0/5.

Currencies with explicit pay evidence in the sample: USD (65) · EUR (9) · GBP (3) · ZAR (1). Raw amounts across different currencies are not compared.

This describes current visible High Paid Job inventory in the same broad occupation family. Percentages use a bounded recent sample and are not a forecast, a complete labor-market census or an employer-quality measure.

Constraint opportunity lab

What changes the size of the current opportunity pool?

Each line applies one stricter evidence-based constraint to the same bounded current role-family sample. It helps you see the trade-off in visible choice without deciding which trade-off is right for you.

Require explicit sponsorship or relocation support 0 / 200 0%

Counts only affirmative or possible sponsorship evidence, or relocation explicitly offered. Unknown is not treated as no.

Require worldwide remote evidence 18 / 200 9%

A much stricter subset: only listings with explicit worldwide-remote evidence remain.

Require at least four Core Decision Facts 53 / 200 27%

Shows the subset with enough stated evidence for a more informed first comparison.

Require a remote-listed arrangement 68 / 200 34%

Counts roles explicitly classified as worldwide remote, region-restricted remote or remote with restrictions still unclear.

Require usable compensation disclosure 81 / 200 41%

Requires amount, explicit ISO currency and a supported pay period. Missing pay evidence remains unknown.

Stay around the same seniority band 175 / 200 88%

Includes roles whose seniority is genuinely unspecified rather than assuming they belong to another level.

These are counterfactual filters over a bounded sample of current HPJ inventory in the same broad occupation family. They show how visible choice changes when one evidence-based constraint is applied; they do not tell you which constraint you should choose or predict hiring outcomes. The calculation uses the 200 most recent current roles from 370 visible roles in this broad family.

Salary transparency context

Is pay disclosure typical for this kind of role?

This listing does not state usable structured compensation. About 41% of the bounded current role sample does.

This listingUsable pay not stated

Compensation counts only when amount, ISO currency and supported pay period are all known.

Current same-role sample41%

Pay disclosure is limited in the current role sample.

Current employer patternInsufficient evidence

Employer-level comparison is withheld until enough current employer listings are available.

This compares salary-disclosure behavior in current visible listings. It does not compare raw salary amounts across currencies, infer undisclosed pay as zero, or rate employer quality.

Private offer & negotiation lab

Turn an offer into evidence, not guesswork

Enter an annual base offer and, if you want, your own target. HPJ compares only within one explicit currency and never chooses a target for you.

Advertised annualized payNot usable / not disclosedListing evidence only.
Current comparable medianUSD 140,05463 current sampled roles
Current upper quartileUSD 165,503Current HPJ inventory context, not a salary recommendation.

Negotiation evidence available: current same-currency market context.

Enter an annual base offer to compare it with explicit same-currency evidence. HPJ will not suggest a target for you.

Review the full package · 10 terms

Mark what is confirmed, what needs clarification and what you want to prioritize. These choices and notes stay in this browser.

Base payVerify

The approved base-pay range is not established in the listing.

Bonus / commissionVerify

Variable compensation is mentioned; verify amount, formula, target and eligibility.

Equity / long-term incentivesMentioned

Equity or long-term incentive language is mentioned; verify grant type, vesting and valuation basis.

Retirement / pensionVerify

Retirement or pension benefits are mentioned; verify employer contribution and vesting.

Health benefitsMentioned

Health-benefit language is mentioned; verify coverage, dependants and employee cost.

Paid leaveMentioned

Paid-leave language is mentioned; verify the exact entitlement and carry-over rules.

Work arrangementKnown

A work-arrangement signal is available; verify schedule details before relying on it.

RelocationVerify

Relocation support not established

Visa / work authorizationVerify

Sponsorship not established

Review timingVerify

A review cycle is mentioned; verify timing and whether compensation can change at that review.

Questions worth taking into the offer conversation

  • What is the approved base-pay range for this role?
  • Is there a bonus, commission or other variable-pay component, and how is it calculated?
  • What retirement or pension contribution does the employer provide?
  • If relocation is relevant, what expenses, timing and repayment conditions are covered?
  • What exact sponsorship or work-authorization conditions apply to this role?
  • When is the first performance and compensation review after joining?
  • What is the approved compensation range, and what portion is guaranteed base pay rather than variable compensation?
  • Is there a firm application deadline, a rolling review window or no stated closing date?

Occupation intelligence

What broader career references connect to this role?

HPJ uses broad comparison families for current-market analysis. External taxonomy results are reference candidates for that broad family, not a declaration that this vacancy has been authoritatively classified into a specific occupation.

HPJ comparison familyCybersecurity roles
Adjacent families worth exploringSoftware engineering roles · Data & AI roles

European occupation references

This service uses the ESCO classification of the European Commission.

U.S. occupation references

This site incorporates information from O*NET Web Services by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). O*NET® is a trademark of USDOL/ETA.

Career reference research

Skills worth investigating

Official occupational context, paired with exact phrases visible in this vacancy. It is not a skills test or an applicant-fit score.

ESCO · European occupation

cyber incident responder

Usually essential in this ESCO occupation
  • GDPR
  • ICT security legislation
  • incidents and accidents recording
  • security engineeringPhrase in listing
  • cope with stress
  • create incident reports
  • operational tactics for emergency responses
Context-dependent ESCO skills
  • perform project management
  • manage IT security compliances
  • ICT process quality models
  • ensure information security
  • cloud technologies

O*NET · U.S. occupation

Information Security Analysts

O*NET occupation skills
  • Reading Comprehension
  • Critical Thinking
  • Active Listening
  • Complex Problem Solving
  • Speaking
  • Writing
  • Judgment and Decision Making
  • Monitoring
Build my private skill preparation brief Your evidence · Practice · Interview questions

Plan how you might demonstrate or investigate occupational skills. These are broad-family reference examples, not confirmed vacancy requirements. Nothing you enter is sent to High Paid Job.

GDPRESCO · Essential · Listing mention unknown
ICT security legislationESCO · Essential · Listing mention unknown
incidents and accidents recordingESCO · Essential · Listing mention unknown
security engineeringESCO · Essential · Exact phrase in listing
cope with stressESCO · Essential · Listing mention unknown
create incident reportsESCO · Essential · Listing mention unknown
operational tactics for emergency responsesESCO · Essential · Listing mention unknown
perform project managementESCO · Optional · Listing mention unknown
manage IT security compliancesESCO · Optional · Listing mention unknown
ICT process quality modelsESCO · Optional · Listing mention unknown
ensure information securityESCO · Optional · Listing mention unknown
cloud technologiesESCO · Optional · Listing mention unknown
Reading ComprehensionO*NET · Skills · Listing mention unknown
Critical ThinkingO*NET · Skills · Listing mention unknown
Active ListeningO*NET · Skills · Listing mention unknown
Complex Problem SolvingO*NET · Skills · Listing mention unknown
SpeakingO*NET · Skills · Listing mention unknown
WritingO*NET · Skills · Listing mention unknown
Judgment and Decision MakingO*NET · Skills · Listing mention unknown
MonitoringO*NET · Skills · Listing mention unknown

Private to this browser. Up to 20 reference skills; not a qualification assessment or hiring prediction.

Useful next question: Which of these occupational reference skills does the hiring manager actually expect for this specific role, and what evidence would demonstrate them?

These skills belong to one reference occupation selected for HPJ’s broad career family, not a verified classification of this vacancy. Text overlap only means a phrase appears in the available listing text; it does not establish an employer requirement, your proficiency, or a qualification gap. A missing mention is unknown, not a deficit.

Adjacent current roles to investigate

Data & AI roles

Senior Data Analyst, Göteborg

Soros Consulting AB · Göteborg, Västra Götalands län, Sverige

same seniority band · similar work-arrangement evidence

Adjacent-family roles are exploration prompts from current HPJ inventory. They are not inferred qualification matches and they do not imply a promotion path.

Career move map

What sits one step away?

This listing is currently read as Senior / lead. Nearby roles one visible seniority step away can help you judge whether to widen the search, stretch upward or compare the responsibilities more carefully.

Broader-entry direction

Stretch direction

These are live roles one visible seniority step away in the same broad occupation family. They can reveal nearby options, but they are not a guaranteed promotion path and do not account for your personal experience.

Skill bridge

What does this role connect to?

AWS is one of the signals this listing shares with skills appearing often across current Cybersecurity roles opportunities.

Skills named in this listing

AWSPostgreSQLTerraform

Shared with the current career sample

  • AWS Seen in 46 sampled listings
  • Terraform Seen in 20 sampled listings

Combinations also appearing together

  • AWS + Terraform appeared together in 18 sampled listings

Additional signals in this listing: PostgreSQL

Application edge

  • If these skills match your background, prepare one concrete example that shows how you used AWS, PostgreSQL, and Terraform rather than relying on a keyword-only claim.

If the named skills are genuinely transferable in your own experience, the occupation map also points to adjacent current families worth researching: Software engineering roles and Data & AI roles. This is exploration context, not a qualification match.

Skill signals come from explicit text mentions. A mention is not automatically a requirement, and absence from the current top-skill list does not make a skill rare or unimportant. The current career comparison draws on 102 sampled listings; 99 contain a recognized skill signal.

Application Decision Lab

Turn the listing into a preparation plan

Separate what the listing actually states from what you still need to prepare or verify. Your selections and short notes stay in this browser and are never submitted to High Paid Job.

Explicit requirement

Non-standard schedule requirement stated

The available wording indicates night, weekend, rotating-shift or on-call work.

Listing mention

AWS

This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.

Listing mention

PostgreSQL

This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.

Listing mention

Terraform

This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.

Questions worth resolving before you rely on the opportunity

  • Compensation: What is the approved compensation range, and what portion is guaranteed base pay rather than variable compensation?
  • Application closing time: Is there a firm application deadline, a rolling review window or no stated closing date?
  • Employment type: Is this permanent, fixed-term, contract, temporary, freelance or another employment arrangement, and which benefits apply?
  • Work authorization / sponsorship: If sponsorship or work authorization matters to you, what exact immigration or employer-sponsorship conditions apply to this role?
  • Application process: What interview, assessment, portfolio, reference or screening stages are part of the hiring process?

Decision analysis

What the listing really tells you

Useful decision context

Senior Staff Infrastructure & Security Engineer at CivilGrid becomes easier to judge once work-location flexibility has usable detail, qualifications reveal more than the job title alone, and the application route gives a few useful clues are viewed together. Here is the current read from the information available.

Work-location flexibility has usable detail

The work-location pattern is “Remote with some uncertainty or restrictions”, with Remote Freedom at 62/100. One practical limit to notice is geographic eligibility is restricted to a country or region..

Qualifications reveal more than the job title alone

1 additional stated barrier. Unstated education or experience requirements stay open rather than being assumed.

The application route gives a few useful clues

Provider-mediated application path. The external application may contain additional steps that are not visible from the listing itself.

Source continuity adds useful context

1 recent enabled source can currently renew this vacancy across 1 source classes. That improves traceability, although it does not verify the employer itself.

How this analysis is assembled

Built from the pay, location, qualification, mobility, application and source details available for this vacancy. Anything the listing leaves unresolved stays unresolved.

Analysis evidence coverage

How much analysis can the current evidence support?

50%Partial analysis evidence coverage
50%
Current-sample pay positionInsufficient comparable salary sample

Comparable salary data is not available for this job yet.

Remote Freedom evidence62 / 100

Measures observable location flexibility and explicit restrictions; it does not determine whether remote work is personally desirable.

Salary evidence qualityNo usable disclosed salary evidence

Missing compensation is not treated as negative evidence; this dimension simply remains unavailable.

Listing freshnessVery fresh

The listing was posted about 1 days ago.

Source provenance evidenceEstablished source evidence

At least one enabled source recently observed the vacancy. The source chain is traceable, but this is not independent employer verification.

There is no universal opportunity score because pay, flexibility and access matter differently to different people. Compare Jobs lets you weight the evidence around your own priorities.

Decision checklist

What is supported, uncertain or worth checking?

This checklist separates supported strengths, visible cautions and missing evidence. It is not an overall recommendation or guarantee that the job is suitable for you.

Supported strengths

No standout strength is supported strongly enough to list here. That is not a negative rating.

Visible cautions

  • Geographic eligibility is restricted to a country or region.
  • The role may involve non-standard hours or on-call work.
  • The listing appears to require substantial prior experience.
  • Non-standard schedule requirement stated

Still unknown

  • There is not enough comparable salary evidence to establish this job’s current pay position.
  • Visa sponsorship is not established by the available listing data.

Qualifications & access

What qualifications are explicitly stated?

Some explicit entry barriers stated

EducationEducation requirement not established
Required experience evidenceExperience requirement not established
Explicit required barriers1
Explicit access signals0

Explicit requirements worth checking

  • Non-standard schedule requirement stated: The available wording indicates night, weekend, rotating-shift or on-call work.

Qualification signals come from explicit listing wording. Anything not mentioned remains unknown, so silence is never treated as proof that a degree, experience, licence or other requirement is unnecessary.

Pay vs. barriers

Opportunity Efficiency not assessed

The current pay position is not reliable enough to weigh compensation against the stated barriers.

Explicit stated barriers

1 explicit required barrier is visible in the available wording.

Location-freedom constraints

1 explicit Remote Freedom restriction signal is present and is shown separately from qualification requirements.

Evidence gaps that could change this interpretation
  • Current comparable pay position is unavailable.
  • Education requirement is not established.
  • Required prior-experience level is not established.

This section weighs pay context against clearly stated barriers without collapsing unlike requirements into one universal score. Degree, experience, licensing, clearance and location limits remain separate, and missing qualification details stay unknown.

Beyond the headline

Not enough evidence for a hidden-value finding

Potential hidden value appears only when several distinct non-pay advantages are actually supported. Missing requirements or benefits are never counted as positives.

Still check: Non-standard schedule requirement stated · The current application path is provider-mediated rather than directly classified as an employer-authorized or official route.

Hidden Value is an experimental evidence summary, not an investment-style score or guarantee of employability. It only uses explicit current listing evidence and does not infer that an unmentioned qualification is unnecessary.

Compensation intelligence

How competitive is this pay?

No High Pay Score yet

Comparable salary data is not available for this job yet.

Why this analysis?

  • Comparable salary data is not available for this job yet.
  • Salary confidence: Not available. No disclosed salary can currently be normalized for comparison. Missing compensation is not treated as low-quality salary evidence.
  • Range quality: No disclosed range.

Employer compensation communication

Pay transparency at CivilGrid

Not enough current listings

Only 1 current listing from this employer is indexed. At least three are required before employer-level pay transparency is summarized.

This pattern comes from the employer’s current visible vacancies. It describes hiring and pay transparency in those listings, not employee satisfaction or a permanent judgement of the employer.

Current employer intelligence

CivilGrid — current opportunity snapshot

Employer-level patterns not available yet

Only 1 current listing from this employer is visible. At least three are needed before an employer pattern is shown.

This snapshot describes the employer’s current visible vacancies—things such as pay disclosure and work arrangement. It is not an employee-satisfaction or hiring-quality rating, and different currencies stay separate.

Work-location intelligence

Remote Freedom

62/100

Remote with some uncertainty or restrictions

62%

Why this score?

  • The role is remote but the source identifies a country or regional restriction.

Location restrictions detected

  • Geographic eligibility is restricted to a country or region.

Remote Freedom measures observable location flexibility only. Unknown work-location information remains unscored. Timezone wording is penalized only when it appears restrictive; general collaboration across time zones is not treated as a restriction. A score does not guarantee legal work eligibility, payroll availability or visa sponsorship.

International applicant intelligence

Visa & relocation signals

Sponsorship status is shown only when the listing provides clear enough wording. Employer history or headquarters location is not used to guess an answer.

Visa sponsorshipSponsorship not established

The available listing details do not contain a clear enough sponsorship statement.

RelocationRelocation support not established

The available listing details do not contain a clear enough relocation statement.

Tradeoff check

What’s the catch?

These are visible conditions worth checking before treating the headline compensation as the whole story:

  • The role may involve non-standard hours or on-call work.
  • The listing appears to require substantial prior experience.
  • This is remote work with a geographic restriction, not a worldwide-remote vacancy.

Application-path intelligence

What can we see about the application process?

Provider-mediated application path

The current application path comes through a publisher or aggregator. The destination may still lead to an employer-authorized hiring system, but that is not clear enough to assume.

Current destination: remoteok.com · HTTPS

No additional required application step is clear in the available listing text. This does not mean the external application is one-click or friction-free.

Application effort is estimated from visible listing and source details. Optional steps are kept separate from mandatory ones, and the external form may contain additional requirements that are not visible here.

Application safety context

Application safety check

Basic application-safety context available

The current application destination has a basic transport-safety signal such as HTTPS. This does not verify the employer, vacancy, recruiter or application process.

Evidence checked: Source provenance · Application destination · Listing wording

Observable transport-safety signals

  • The available application destination uses HTTPS.
Before you share money or sensitive information
  • Confirm the vacancy on the employer’s official careers site when practical, especially if a recruiter contacts you outside the listed application path.
  • Check that recruiter email domains and application destinations are consistent with the employer or an identifiable recruiting provider.
  • Do not pay application, processing, training or equipment fees merely to be considered for a job.
  • Do not send cryptocurrency, gift cards, online-banking credentials or PINs as part of an application.
  • Treat unusually fast offers or interviews conducted only through informal messaging channels as reasons to verify the employer independently.

This is a limited safety screen, not employer verification and not a fraud determination. Never send money, cryptocurrency, passwords or sensitive banking credentials merely because a listing appears on a job platform.

Original listing details

The section below comes from the listing source. The decision sections above use the job’s structured pay, location, qualification, mobility and application details to give you additional context.

ABOUT CIVILGRID

CivilGrid is the trusted civil design platform powering affordable infrastructure renewal and growth. We give utilities, civil engineers, and municipalities a single, collaborative source of truth for what's underground so teams can plan, design, and build faster, smarter, and safer.

Our platform consolidates utility records, geotechnical and environmental data, paving moratoriums, and jurisdictional requirements directly from 3,000+ utilities, agencies, and municipalities with full chain-of-custody documentation. Teams at PG&E, Mark Thomas, and dozens of leading engineering firms use CivilGrid to cut research time by up to 88%, reduce project costs, prevent dig-ins, and accelerate delivery on the projects that keep communities running.

We're a venture-backed Series A startup tackling a $4.7T US infrastructure market that has been underserved by software for decades. Founded by industry insiders, each with 10+ years in utilities and civil engineering, we move fast, ship work that matters, and stay close to the customers and field teams we build for.

WHY THIS ROLE

We're looking for a Security & Infrastructure Engineer to own our security posture and assist in supporting our cloud platform and reliability as we scale into large utilities and civil engineering firms. You'll take over and grow our security program, working across engineering, IT, and leadership. The role is on the Systems team that spans DevOps, SRE, and security. Your focus is security but you will contribute across the team.

This role reports to the Head of Engineering. It is a hybrid role with expectations that you are working from our Boston, MA office at least 3 days per week if hired.

WHAT YOU'LL DO

  • Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions

  • Run our security program: SOC 2 readiness and audits, vendor reviews, access controls, endpoint security, and threat modeling

  • Define and enforce policies for identity, secrets, data handling, and production access across the company

  • Lead incident response for both security events, and some reliability events, from detection through resolution and follow-up

  • Harden and monitor our GIS servers (Windows Server) alongside our AWS platform

  • Build and maintain our Trust Center, and lead security reviews with customers

  • Contribute to our AWS environment end to end: VPC architecture, ECS, RDS, secrets management, IAM, networking, and cost optimization

  • Contribute to improving reliability practices: SLOs, observability, alerting, on-call rotation, runbooks, and blameless post-incident reviews

  • The tech:

    • AWS ECS, Postgres on RDS managed with CDK

    • GitHub, Datadog, Slack, Notion, Drata

WHAT YOU'LL BRING

  • At least 5-8 years of experience across product security, platform security, or security engineering, with hands-on experience with DevOps or SRE of production AWS infrastructure

  • Experience running or supporting a SOC 2 program, including evidence collection, control design, and auditor coordination

  • Deep working knowledge of AWS (VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch) and infrastructure-as-code (Terraform, CDK, or equivalent)

  • Experience running vulnerability management, from scanner findings and outside reports to fixes shipped

  • Track record of improving reliability in production: defining SLOs, building observability, running on-call, and leading post-incident reviews

  • Startup ready: autonomous, moves fast, takes initiative without being asked

  • Strong verbal and written communication, able to articulate ideas clearly and collaborate effectively

BONUS POINTS

  • Experience supporting B2B products sold into regulated industries (utilities, energy, public sector)

HOW WE WORK

We're a small, but rapidly growing team that ships. Expect direct feedback, real ownership from day one, and proximity to customers — huge utilities, public agencies, and engineering firms whose work depends on what we build. We default to in-person collaboration where it matters and remote-friendly flexibility otherwise. We hire people who care deeply about their craft and the communities our customers serve.

COMPENSATION & BENEFITS

The base salary range for this role is $137,318 - $192,960.

Base salary is only one part of your total compensation package at CivilGrid, which also includes meaningful early-stage equity, comprehensive benefits, and the opportunity to shape a category-defining company. The base salary range listed above may encompass various levels and/or geographic locations; final offers are determined based on the candidate's experience, skills, level, and work location.

In addition to base and equity, we offer:

  • Company-funded medical, dental, and vision insurance — including medical plans at no cost to the employee

  • FSA (health and dependent care)

  • Unlimited PTO and a culture that expects you to actually use it

  • 401(k) plan

  • Flexible, remote-friendly work environment

  • A high-trust team, real ownership, and the chance to do the most meaningful work of your career

EQUAL EMPLOYMENT OPPORTUNITY

CivilGrid is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran status, pregnancy, or any other characteristic protected by federal, state, or local law. Employment decisions at CivilGrid are based on business needs, job requirements, and individual qualifications. If you require a reasonable accommodation to participate in the application or interview process, please contact us — we're happy to help.



Please mention the word **THINNER** and tag RMjYwNzpmMjk4OjU6MTE3Yjo6YTg3Ojk5MjA= when applying to show you read the job post completely (#RMjYwNzpmMjk4OjU6MTE3Yjo6YTg3Ojk5MjA=). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.

Listing provenance

Where did this job come from?

See where this vacancy came from and whether more than one current source can still support it. Source names help with traceability and attribution; they are not endorsements or guarantees.

Current source evidenceEstablished source evidence

At least one enabled source recently observed the vacancy. The source chain is traceable, but this is not independent employer verification.

Continuity
One recent renewable source
Source-class independence
One renewable source class
Last source observation
Observed very recently

This records when High Paid Job last observed the vacancy in source evidence. It confirms source presence, not that the employer edited the vacancy at that time.

  • 1 enabled source recently observed this vacancy.

Source confidence is about traceability and continuity. It is separate from application safety and should not be read as an employer reputation rating.

Remote OKPublisher source

The vacancy is supplied by an external job publisher. Source information helps show where the listing came from; it is not a guarantee about the employer or vacancy.

Continue to applicationOpens in a new tab

Listing source: Remote OK. Destination: remoteOK.com. The application opens in a new tab so you can keep this report open.