SRE Security Engineer

SRE Security Engineer### SRE Security Engineer Apply:
Remote:
US - IN - Carmel (OPENLANE):
Full time:
Posted Today:
R-255273
*
* Who We Are:

** At OPENLANE we make wholesale easy so our customers can be more successful.

** We’re a technology company
** building the world’s most advanced—and uncomplicated—digital marketplace for used vehicles.  
** We’re a data company
** helping customers buy and sell smarter with clear, actionable insights they can understand and use.  
** And we’re an innovation company
** accelerating the future of wholesale remarketing through curiosity, collaboration, and an entrepreneurial spirit.

** Our Values:*
* ** Driven Way builders.
** We pursue challenges that inspire us to build, create, and innovate.  
** Relentless Curiosity.
** We seek to understand and improve our customers’ experience.  
** Smart Risk-Taking.
** We transform risk into progress through data, experience, and intuition.  
** Fearless Ownership.
** We deliver what we promise and learn along the way.
** We're Looking For
** An SRE Security Engineer who takes ownership of security findings from detection through resolution — remediating misconfigurations, vulnerabilities, and access issues across AWS, Azure, GCP, Git Hub, Okta, and Active Directory. You will join a new SRE Security Engineering team formed to close the gap between what Security reports and what actually gets fixed: you will work hands-on inside cloud and identity platforms to drive issues to closure, rather than simply tracking tickets.

** You Are
** Analytical, decisive, accountable, collaborative, security-minded, and action-oriented.  
** You Bring
*** Core knowledge of identity and access management concepts (RBAC/ABAC, least privilege, federation, SSO) across cloud platforms and on-prem directory services.
* Functional expertise interpreting findings from vulnerability scanners and cloud security posture tools, and translating them into prioritized, actionable remediation.
* Technical expertise remediating issues across AWS, Azure, GCP, Git Hub, Okta, and Active Directory — including policy and permission tightening, credential rotation/revocation, group and role cleanup, and network/security-group hardening.
* Core SRE fundamentals:
Linux/Unix systems administration, networking, and infrastructure-as-code (Terraform or equivalent), enough to diagnose and change the systems being remediated.
* Active, daily use of AI assistants such as Claude, Gemini, and OpenAI/ChatGPT to speed up investigation, triage, and remediation work.  
** You Own
*** End-to-end remediation of security findings sourced from Ox, Upwind, Socket, vulnerability scans, and direct Security team reports, across all major cloud and identity platforms.
* Triage and validation of incoming findings — distinguishing true positives from noise and prioritizing based on risk.
* A rotating on-call responsibility for urgent security alerts requiring same-day action.
* Adherence to SRE's standard change-management process for any remediation that touches production infrastructure, ensuring changes are reviewed and approved before deployment.
* Timely patching of known vulnerabilities and dependency findings across AWS, Azure, GCP, Git Hub, Okta, and Active Directory systems.  
** You Drive
**** Execution:
** Close the loop between security detection and resolution, reducing the backlog of unresolved findings and shortening time-to-remediate for critical issues.  
** Results:
** Measurably shrink the population of standing security findings across AWS, Azure, GCP, Git Hub, Okta, and Active Directory, and reduce recurrence through root-cause fixes rather than one-off patches.  
** Team:
** Contribute to remediation playbooks and runbooks as the team matures, and share platform-specific expertise with…