<div><h3>Company Description</h3>Voltus is the leading platform connecting distributed energy resources to electricity markets, delivering less expensive, more reliable, and more sustainable electricity. Our commercial and industrial customers and grid services partners generate cash by allowing Voltus to maximize the value of their flexible load, distributed generation, energy storage, energy efficiency, and electric vehicle resources in these markets.<h3>Job Description</h3></div><div>Operating as a virtual power plant, our platform delivers the grid of the future today. Our software coordinates and dispatches actual megawatts across thousands of grid-connected sites within regulated wholesale energy markets, managing real financial settlements for the customers behind them. In this position, you will secure real-time energy dispatches, thousands of integrations, and live telemetry for critical infrastructure where system availability and data integrity directly affect physical power distribution and real people.In this role, you will manage security holistically and make critical, actionable decisions daily, with the independence to shape the program's evolution. You will design and secure software to safeguard virtual critical energy infrastructure, directly enabling the climate energy transition. Your responsibilities will cover a wide range of challenges: establishing our detection and response capabilities from their foundations, leading end-to-end incident response, transforming vulnerability noise in a large monorepo into actionable insights for engineering teams, and operating on both sides of the AI frontier, utilizing agentic tools to amplify your output while establishing the guardrails the company will adopt.</div> <h3>Requirements</h3><ul><div><ul style="margin-top:0px;margin-bottom:0px;padding-inline-start:48px;"><li style="font-size:11pt;font-family:Arial , sans-serif;">3+ years of security engineering or a security-focused infrastructure or software engineering role ideally at a SaaS remote-first company. security </li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;font-weight:bold;">Comfortable with programming in at least one language. Proficiency programming (Go or Python preferred) to solve real problems, and reading unfamiliar code. You should have shipped some automation, services, or detection-as-code that others relied on.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Hands-on experience identifying and analyzing software vulnerabilities. Triaging dependency and code-level findings, judging exploitability and reachability, and working with engineers to ship fixes. </li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Incident Management. Run security investigations, execute containment and scoping protocols, develop incident playbooks, and coordinate tabletop simulation exercises.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">SIEM Experience. Authoring, tuning, and maintaining custom detection rules across a centralized SIEM or analytics platform (such as Datadog, Splunk, Panther, or Elastic) to analyze aggregated logs from cloud infrastructure, endpoints, and identity systems.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Hands-on EDR operation experience with SentinelOne, CrowdStrike, or similar, including policy design, response actions, and tuning.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Strong written communication and enjoy working autonomously.</li></ul></div></ul><h3>Preferred Skills and Attributes</h3><ul><div><ul style="margin-top:0px;margin-bottom:0px;padding-inline-start:48px;"><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Strong grasp of cloud, networking, and security concepts. AWS-native security services (CloudTrail, GuardDuty, Security Hub). IAM, RBAC and least privilege, role assumption and federation, network boundaries (VPCs, security groups), encryption and key management (KMS) </li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Tools &amp; Tech Experience with Infrastructure as Code tools (Terraform), containerization (Docker), and monitoring/observability platforms (Datadog, Prometheus, OTEL). Container orchestration tooling (Hashicorp Nomad Vault,) Kubernetes. </li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Background in static application security testing (SAST) and code-level security reviews, including overseeing AI-assisted analysis across large codebases.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Proficiency producing and maintaining SBOMs within build pipelines, or designing a vulnerability management program utilizing software composition analysis (SCA) tooling on a monorepo.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Compliance &amp; Framework Experience: Experience of managing and owning technical security controls within SOC 2, ISO 27001, or comparable regulatory frameworks. This includes implementing automated evidence collection processes and representing your work through audit cycles.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Comfort with AI and agentic engineering tools. (AI coding agents and assistants such as Claude Code, Copilot, or Cursor) as part of a working method, with judgment about where they help and where they do not.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Threat Modeling &amp; Architecture. Hands-on experience mapping out attack surfaces and trust boundaries for software infrastructure, integrations, and advanced AI technologies. Ability to effectively translate foundational models like STRIDE or MITRE ATT&amp;CK into robust, deployable controls and real-time alerts.</li></ul></div></ul><h3>Bonus Qualifications</h3><ul><div><ul style="margin-top:0px;margin-bottom:0px;padding-inline-start:48px;"><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Regulatory &amp; Risk Frameworks: Operational understanding of NIST CSF, ISO 27001, HIPAA, or GDPR. Ability to translate technical security controls into specific audit requirements and compliance evidence.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Professional Certifications: Industry-recognized credentials such as CISSP, GIAC, AWS Certified Security Specialty, or CompTIA Security+.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Vendor &amp; Supply Chain Risk: Evaluating third-party risk posture, auditing complex OAuth integration scopes, and assessing AI service providers for secure data retention and robust operational security configurations.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">AI Automation &amp; Threat Landscapes: Developing LLM-powered security workflows via API and maintaining awareness of specialized vulnerabilities like prompt injection or those outlined in the OWASP Top 10 for LLMs.</li><li style="font-size:12pt;font-family:'Open Sans' , sans-serif;color:#334155;">Enterprise AI Governance: Implementing the control plane for safe AI use, including model allow-lists, data boundary enforcement, and AI gateway management.</li></ul></div></ul> <div><div>**Please include a link to your GitHub account in your application (in the “links” section). Applications without a GitHub account will not be considered**</div><div> </div><div>Please note that at this time, we do not sponsor visas or transfers for new hires. Voltus teammates need to be authorized to work from their home location (in the US or Canada, unless otherwise indicated on the role description).</div><div> </div><div>Additionally, while Voltus is an all-remote workplace, we have limitations on where employees are able to work for regulatory and security reasons. We expect that Voltans are working primarily from their home country. Working while traveling to other countries must be approved as per our Global Remote Travel Policy.</div><div> </div><div>At Voltus, we are proud to be an equal opportunity employer because we recognize that a diverse organization begins with a diverse candidate pool. This means we do not tolerate discrimination of any kind and are committed to providing equal employment opportunities regardless of your gender identity, race, nationality, religion, age, sexual orientation, veteran status, disability status, or marital status.</div></div>

Voltus is a fully remote clean energy technology platform. Our mission is to be the Distributed Energy Platform that fulfills the promise of the energy transition. The Voltus Platform connects any distributed energy resource to any energy market across the US and Canada, providing flexibility, reliability, and resilience to the grid.&nbsp;
Want to be part of a team that is laser focused on combating the climate crisis? Want to work arm in arm with the very best talent in the industry to help achieve this goal? Want your work to directly benefit the world and future generations? Join us!

Security Engineer

<div><h3>Company Description</h3>Voltus is the leading platform connecting distributed energy resources to electricity markets, delivering less expensive, more reliable, and more sustainable electricity. Our commercial and industrial customers and grid services partners generate cash by allowing Voltus to maximize the value of their flexible load, distributed generation, energy storage, energy efficiency, and electric vehicle resources in these markets.<h3>Job Description</h3></div><div>Operating as a virtual power plant, our platform delivers the grid of the future today. Our software coordinates and dispatches actual megawatts across thousands of grid-connected sites within regulated wholesale energy markets, managing real financial settlements for the customers behind them. In this position, you will secure real-time energy dispatches, thousands of integrations, and live telemetry for critical infrastructure where system availability and data integrity directly affect physical power distribution and real people.In this role, you will manage security holistically and make critical, actionable decisions daily, with the independence to shape the program's evolution. You will design and secure software to safeguard virtual critical energy infrastructure, directly enabling the climate energy transition. Your responsibilities will cover a wide range of challenges: establishing our detection and response capabilities from their foundations, leading end-to-end incident response, transforming vulnerability noise in a large monorepo into actionable insights for engineering teams, and operating on both sides of the AI frontier, utilizing agentic tools to amplify your output while establishing the guardrails the company will adopt.</div> <h3>Requirements</h3><ul><div><ul><li>3+ years of security engineering or a security-focused infrastructure or software engineering role ideally at a SaaS remote-first company. security </li><li>Comfortable with programming in at least one language. Proficiency programming (Go or Python preferred) to solve real problems, and reading unfamiliar code. You should have shipped some automation, services, or detection-as-code that others relied on.</li><li>Hands-on experience identifying and analyzing software vulnerabilities. Triaging dependency and code-level findings, judging exploitability and reachability, and working with engineers to ship fixes. </li><li>Incident Management. Run security investigations, execute containment and scoping protocols, develop incident playbooks, and coordinate tabletop simulation exercises.</li><li>SIEM Experience. Authoring, tuning, and maintaining custom detection rules across a centralized SIEM or analytics platform (such as Datadog, Splunk, Panther, or Elastic) to analyze aggregated logs from cloud infrastructure, endpoints, and identity systems.</li><li>Hands-on EDR operation experience with SentinelOne, CrowdStrike, or similar, including policy design, response actions, and tuning.</li><li>Strong written communication and enjoy working autonomously.</li></ul></div></ul><h3>Preferred Skills and Attributes</h3><ul><div><ul><li>Strong grasp of cloud, networking, and security concepts. AWS-native security services (CloudTrail, GuardDuty, Security Hub). IAM, RBAC and least privilege, role assumption and federation, network boundaries (VPCs, security groups), encryption and key management (KMS) </li><li>Tools &amp; Tech Experience with Infrastructure as Code tools (Terraform), containerization (Docker), and monitoring/observability platforms (Datadog, Prometheus, OTEL). Container orchestration tooling (Hashicorp Nomad Vault,) Kubernetes. </li><li>Background in static application security testing (SAST) and code-level security reviews, including overseeing AI-assisted analysis across large codebases.</li><li>Proficiency producing and maintaining SBOMs within build pipelines, or designing a vulnerability management program utilizing software composition analysis (SCA) tooling on a monorepo.</li><li>Compliance &amp; Framework Experience: Experience of managing and owning technical security controls within SOC 2, ISO 27001, or comparable regulatory frameworks. This includes implementing automated evidence collection processes and representing your work through audit cycles.</li><li>Comfort with AI and agentic engineering tools. (AI coding agents and assistants such as Claude Code, Copilot, or Cursor) as part of a working method, with judgment about where they help and where they do not.</li><li>Threat Modeling &amp; Architecture. Hands-on experience mapping out attack surfaces and trust boundaries for software infrastructure, integrations, and advanced AI technologies. Ability to effectively translate foundational models like STRIDE or MITRE ATT&amp;CK into robust, deployable controls and real-time alerts.</li></ul></div></ul><h3>Bonus Qualifications</h3><ul><div><ul><li>Regulatory &amp; Risk Frameworks: Operational understanding of NIST CSF, ISO 27001, HIPAA, or GDPR. Ability to translate technical security controls into specific audit requirements and compliance evidence.</li><li>Professional Certifications: Industry-recognized credentials such as CISSP, GIAC, AWS Certified Security Specialty, or CompTIA Security+.</li><li>Vendor &amp; Supply Chain Risk: Evaluating third-party risk posture, auditing complex OAuth integration scopes, and assessing AI service providers for secure data retention and robust operational security configurations.</li><li>AI Automation &amp; Threat Landscapes: Developing LLM-powered security workflows via API and maintaining awareness of specialized vulnerabilities like prompt injection or those outlined in the OWASP Top 10 for LLMs.</li><li>Enterprise AI Governance: Implementing the control plane for safe AI use, including model allow-lists, data boundary enforcement, and AI gateway management.</li></ul></div></ul> <div><div>**Please include a link to your GitHub account in your application (in the “links” section). Applications without a GitHub account will not be considered**</div><div> </div><div>Please note that at this time, we do not sponsor visas or transfers for new hires. Voltus teammates need to be authorized to work from their home location (in the US or Canada, unless otherwise indicated on the role description).</div><div> </div><div>Additionally, while Voltus is an all-remote workplace, we have limitations on where employees are able to work for regulatory and security reasons. We expect that Voltans are working primarily from their home country. Working while traveling to other countries must be approved as per our Global Remote Travel Policy.</div><div> </div><div>At Voltus, we are proud to be an equal opportunity employer because we recognize that a diverse organization begins with a diverse candidate pool. This means we do not tolerate discrimination of any kind and are committed to providing equal employment opportunities regardless of your gender identity, race, nationality, religion, age, sexual orientation, veteran status, disability status, or marital status.</div></div>

Security Engineer

About the Job

About the Company

Voltus

Similar Jobs

Application Security Engineer

Application Security Engineer

Senior Security Engineer

Senior Security Engineer

Staff SecOps Engineer

Staff SecOps Engineer

Application Security Engineer

Application Security Engineer

Senior/Staff Network Security Engineer

Senior/Staff Network Security Engineer

Sr. Offensive Security Engineer

Sr. Offensive Security Engineer

Security Engineer, Principal Member of Technical Staff

Security Engineer, Principal Member of Technical Staff

Engineer IV, Cyber DevSecOps

Engineer IV, Cyber DevSecOps

Security Engineer

Security Engineer

Senior Application Security Engineer

Senior Application Security Engineer