IT & Cyber Security Senior Engineer

OnTrac is hiring an IT & Cyber Security Senior Engineer!

Are you eager to join a dynamic and expanding company where you can both learn and make a meaningful impact? If you possess a strong sense of empathy, enjoy assisting others, thrive in a fast-paced environment, and excel at problem-solving, we encourage you to apply today to connect with a recruiter!

Founded in 1986, OnTrac has evolved into the leading provider of same-day and next-day delivery services in the U.S. for premier e-commerce and product-supply businesses, including five of the largest retailers in the U.S.

Location: Remote – This position may be performed remotely in states where the company is authorized to employ individuals. Washington D.C., Maryland, Virginia (Preferably)
Compensation: The expected starting base pay range for this position is $156,000. – $195,000. with full potential base salary range over a successful candidate’s tenure in the position of $156,000. – $234,000. Actual compensation will be determined based on experience, skills, internal equity, and other job-related factors.
This position may also be eligible for bonus, commission, or other incentive compensation in accordance with the terms of the applicable plan of up to a 20% Bonus Target.

Shift: Monday - Friday, 8:00am - 5:00pm (Hours subject to change based on the needs of the business)

Employment Logistics:
The IT & Cyber Security Senior Engineer is responsible for designing, building, and maintaining robust security architectures across hybrid environments (on prem + cloud). You will enable the SOC by improving detection and orchestration capabilities and enable GRC by translating regulatory requirements into technical controls and automated evidence collection. This is a "hands-on-keyboard" role that requires the ability to pivot between deep technical engineering and assisting in strategic support

Unpacking the Benefits:

Employees are eligible for a comprehensive benefits package which may include:

• Medical, dental, and vision insurance
• Life and short- and long-term disability coverage
• 401(k) retirement savings plan with company match
• Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
• Two (2) floating holidays per year
• Paid sick leave*
• Six (6) paid company holidays
• Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave
• Additional wellness and employee assistance programs

Benefits eligibility and offerings are subject to the terms and conditions of the applicable plans and company policies.

The Must-Haves:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience)
• 10+ years of progressive experience in IT and Security
• At least 3 years in a senior or lead engineering capacity
• Strong ability to code/script in Python, PowerShell, or Bash to automate repetitive security tasks and integrations
• Deep understanding of SIEM logic, YARA rules, and EDR configuration to improve detection efficacy
• Ability to interpret NIST CSF, ISO 27001, or SOC2 and implement the technical controls required to meet them
• Preferred CISSP, CISM, or hands-on technical certifications like GIAC (GCIA, GCDA) or Offensive Security (OSCP)

Your Mission in Motion:
A summary of key responsibilities for the role is outlined below. Additional duties may be assigned as needed to support business objectives.
• SOC + GRC enablement: Design and implement technical solutions that assist the SOC in alert orchestration (SOAR) and provide the GRC team with automated risk monitoring and evidence collection capabilities.
• Security integration: Lead the integration of security tools (EDR, SIEM, Cloud Security) to ensure a unified and visible security posture.
• Risk management support: Assist in technical risk assessments by identifying vulnerabilities and recommending/implementing remediation engineering.
• Architecture & engineering: Develop and maintain security infrastructure across hybrid environments (on prem/cloud), applying security by design to new deployments.
• Incident response escalation: Serve as a Tier 3 escalation point for complex incidents requiring deep forensic and/or architectural expertise.
• Mentorship: Guide junior engineers and analysts, fostering technical excellence and proactive security practices.
Paving your way to your success:

• You bring the “generalist” mindset, with proficiency across network security (firewalls, Zero Trust), endpoint protection, and cloud security (AWS/GCP).
• You communicate exceptionally, explaining deep tech