Security Engineer

Why this role now

Leads our SOC 2 readiness and CJIS-aligned security posture.

Overview

As a Security Engineer at EvidaraIQ, you'll establish the security and compliance foundation for a platform that will handle sensitive digital evidence. You'll own security architecture, SOC 2 readiness (we are targeting SOC 2 Type II certification), and CJIS-aligned controls — building trust with law enforcement before and after launch.

Key Responsibilities

• •Design and implement security controls and infrastructure
• •Conduct security assessments, vulnerability testing, and penetration testing
• •Lead SOC 2 Type II readiness and certification path
• •Develop and enforce security policies, procedures, and best practices
• •Implement and manage security monitoring, logging, and incident response
• •Ensure compliance with CJIS, HIPAA, and other regulatory requirements
• •Conduct security reviews of code, infrastructure, and third-party integrations
• •Respond to security incidents and conduct post-incident analysis
• •Collaborate with engineering on secure development practices
• •Stay current with security threats, vulnerabilities, and industry best practices

Requirements

• •Bachelor's degree in Computer Science, Cybersecurity, or related field
• •5+ years of experience in information security or cybersecurity
• •Strong knowledge of security frameworks (NIST, ISO 27001, SOC 2)
• •Experience with cloud security (AWS, GCP, or Azure)
• •Proficiency in security tools and technologies (SIEM, IDS/IPS, vulnerability scanners)
• •Understanding of network security, encryption, and authentication systems
• •Experience with security compliance and audit processes
• •Strong problem-solving and analytical skills
• •Excellent written and verbal communication skills
• •Relevant security certifications (CISSP, CISM, CEH, or similar)

Preferred Qualifications

• •Experience with CJIS compliance and law enforcement security requirements
• •Knowledge of legal technology and evidence handling security
• •Experience leading SOC 2 Type II readiness or audits
• •Understanding of chain of custody and audit logging requirements
• •Experience with secure software development lifecycle (SSDLC)
• •Knowledge of zero-trust architecture and modern security practices
• •Experience with container security and Kubernetes
• •Active security clearance or ability to obtain one