Systems & Security Engineer

Reports to:

Chief Technology Officer |

Location:

Remote (Residents in , NE, GA, OH, TX, TN, PA, MI, FL Only) | Type:
Salary Exempt

Avatar Fleet helps transportation companies recruit, qualify, and stay compliant with the drivers who keep their fleets moving. Our platform, anchored by Driver Hub, combines an applicant tracking system, DOT-compliant driver qualification files, and ongoing compliance monitoring into a single source of truth. We serve carriers across trucking, motorcoach, transit, and last-mile delivery who depend on us to keep their drivers road-ready and audit-ready.

The Systems & Security Engineer owns day-to-day security administration and infrastructure operations, working closely with the CTO and software engineering team. Approximately half of the role focuses on security administration, including vulnerability management, patching, mitigation, and SOC 2 Type II compliance. The remaining time focuses on systems administration, production reliability, and support for engineering delivery. These responsibilities overlap throughout the workday.

We maintain SOC 2 Type II audited compliance. Continuous readiness for our annual audit, with the goal of no exceptions, is a top priority. This requires controls that operate consistently throughout the year, timely remediation, and clear evidence of the work performed.

Our infrastructure runs on AWS and is EC2 heavy. Strong Linux administration and experience maintaining production applications on Linux hosts are essential. You will also support ECS and services such as WAF, ALB, S3, and EFS, and partner with software engineers on CI/CD. Application uptime directly affects our customers and is a core responsibility of this role.

The objective: keep Avatar Fleet's SaaS infrastructure secure, reliable, and continuously audit ready. Maintain patched and hardened systems, effective monitoring, tested backups, documented controls, and dependable deployment processes so customers can rely on our applications and engineers can deliver changes with confidence.

• Own day-to-day security administration and coordinate SOC 2 Type II control execution, evidence collection, and annual audit preparation with the CTO and other control owners.
• Maintain a year-round control calendar; track recurring reviews, evidence requirements, remediation commitments, and audit requests through completion.
• Maintain security policies and operating procedures that reflect actual practices; identify control gaps early and drive corrective action.
• Administer access controls and support access reviews, least privilege, credential management, and security logging. Keep records complete and readily available for audit.

• Run and review vulnerability assessments; prioritize findings by severity, exposure, business risk, and customer impact.
• Own routine and urgent patching of Linux hosts, application dependencies, container images, and supporting software in partnership with engineering.
• Plan maintenance, validate changes, and confirm remediation. Apply and document mitigations when an immediate patch is not practical.
• Track findings from discovery through verified resolution and maintain evidence of patching, mitigation, and approved exceptions.

• Deploy, configure, and maintain AWS resources, including EC2, ECS, WAF, ALB, S3, EFS, IAM, and networking components.
• Maintain secure configurations, appropriate capacity, reliable connectivity, and effective monitoring across production and supporting environments.
• Manage backups, replication, retention, restore testing, and secure data disposal in line…