Senior Security & Infrastructure Engineer

Auto Crib is the leader in industrial vending technology. We design and create all the software and hardware in-house to help manage inventory for our customers. Our industry is vast; customers range from manufacturing to government to retail to data centers. We are a growing company that is looking for candidates who are looking for a challenge and like to wear a lot of hats.

Auto Crib is big enough to provide the resources you need, but small enough to still feel like a family. We believe in giving employees autonomy to make their own decisions and actively help them with their career path. Our benefits include healthcare, 401k, life insurance, and PTO.

Job location:

This position is located in Tustin, California, on-site (full-time)

We are seeking a hands-on Senior Security & Infrastructure Engineer to own and mature the organization's cybersecurity program while supporting the security, reliability, and compliance of our mission-critical SaaS platform and corporate infrastructure.

This role serves as the primary technical security resource for the organization and is responsible for security operations, vulnerability management, incident response, infrastructure hardening, identity security, compliance initiatives, and cloud security governance. The ideal candidate combines strong cybersecurity expertise with practical infrastructure experience and can effectively partner with Engineering, Dev Ops, and IT teams to reduce risk while enabling business growth.

This position is ideal for an experienced security professional who enjoys working across multiple technology domains and wants to have a direct impact on the organization's overall security posture.

Security Operations & Monitoring

• Own and administer enterprise security tools, including SIEM, EDR, vulnerability management, email security, and security monitoring platforms.
• Monitor, investigate, and respond to security alerts and incidents.
• Develop and maintain detection rules, dashboards, and alerting strategies.
• Conduct proactive threat hunting and security investigations.
• Coordinate third-party penetration testing and security assessments.
• Maintain security metrics, reporting, and executive-level visibility into organizational risk.

Vulnerability & Risk Management

• Own and manage the enterprise vulnerability management program.
• Perform vulnerability scanning across infrastructure, operating systems, cloud services, applications, and endpoints.
• Prioritize remediation efforts based on business impact and risk.
• Track remediation activities and communicate status to leadership.
• Validate remediation efforts and drive continuous improvement.
• Maintain risk registers and support organizational risk assessments.

Incident Response & Security Engineering

• Lead security incident response activities including containment, eradication, recovery, and lessons learned.
• Develop and maintain incident response procedures and playbooks.
• Perform root cause analysis and coordinate post-incident reviews.
• Support forensic investigations and evidence collection.
• Partner with internal and external stakeholders during security events.
• Improve detection, response, and recovery capabilities across the organization.

• Secure and harden Windows Server, Linux, virtualization platforms, databases, storage systems, and enterprise applications.
• Review and maintain firewall configurations, VPNs, remote access solutions, and network security controls.
• Support network segmentation and Zero Trust initiatives.
• Implement security baselines aligned with CIS Benchmarks and industry best practices.
• Participate in infrastructure architecture reviews and technology evaluations.
• Validate backup, disaster recovery, and ransomware recovery readiness.

Cloud Security

• Administer and secure Microsoft Azure and Microsoft 365 environments.
• Implement cloud security controls, monitoring, and governance standards.
• Review cloud architecture for security and compliance requirements.
• Manage security configurations for cloud-hosted SaaS infrastructure.
• Support continuous monitoring and cloud security posture management initiatives.

Identity & Access Management

• Administer and secure Active Directory and Microsoft Entra .
• Implement least-privilege access controls and role-based access management.
• Manage privileged access, service accounts, and identity governance processes.
• Conduct periodic access reviews and entitlement audits.
• Support MFA, Conditional Access, and identity security initiatives.