Own the organization’s infrastructure and application security posture across Azure, AKS, on-premises systems, and client applications. Lead vulnerability management, penetration testing, IAM hardening, container and CI/CD security, incident response, compliance readiness for SOC 2 and GDPR, client security requirements, and audit coordination. Develop runbooks, detection logic, remediation plans, and leadership metrics while partnering with engineering, DevOps, offshore teams, auditors, vendors, and clients.
Sr. Security Engineer
Type: Full-time
Location: Charlotte, NC (Onsite)
Team: IT / Information Security
About Velocitor Solutions
Velocitor Solutions is a leader in enterprise fleet management and mobile innovation, celebrating over 25 years of profitably growing technology. We go beyond standard telematics by offering a comprehensive, managed ecosystem—managing over 200,000 mobile assets for Fortune 500 clients across North America. Our V-Track platform integrates GPS tracking, AI-powered video telematics, and real-time data to drive safety and efficiency. We are in a pivotal phase of growth and looking to expand technology team.
Why Join Velocitor Solutions
You will own security for a platform that runs mission-critical fleet operations for national enterprise clients. The work is visible, the stakes are concrete, and the roadmap is active. You will have the mandate to fix what you find.
Role Summary
We are hiring a Senior Security Engineer in IT to own the day-to-day security posture of Velocitor's infrastructure and application platform. You will drive vulnerability management, lead and coordinate penetration testing, harden our Azure and AKS environments, and tighten identity and access controls across the organization. You will work closely with the platform, DevOps, engineering, and client-facing teams, and you will translate findings into fixes that ship. This is a hands-on role for someone who can both run the assessment and shape the remediation of the environment.
Key Responsibilities
- Own vulnerability management across Azure, AKS, on-premises systems, and client-facing applications. Prioritize by real risk and client impact, not raw CVE counts.
- Lead and coordinate penetration testing engagements, including scoped tests against client UAT and production environments. Manage internal testers and third-party firms, track findings to closure, and produce client-ready results.
- Harden our identity stack on Entra ID and Auth0. Drive least-privilege access, reduce standing Domain Admin exposure through Restricted Management Administrative Units, and close IAM gaps as access volume scales.
- Secure the AKS platform and CI/CD pipelines. Review container images, cluster configuration, secrets management, and network policy.
- Build and maintain security runbooks, incident response procedures, and detection logic.
- Participate in the security on-call rotation and lead incident response when events occur.
- Own compliance and audit readiness end to end, including SOC 2 and GDPR. Manage relationships with external auditors and security vendors, coordinate evidence collection, and drive remediation of findings.
- Own client security requirements and questionnaires. Lead RCAs and remediation plans when incidents touch client environments.
- Partner with DevOps and engineering to embed security into the delivery pipeline rather than gating it at the end.
- Track and report platform security posture to leadership with clear metrics and recommendations.
Required Qualifications
- Bachelor Degree or at least 8-10 years of IT Technical experience.
- 8+ years in security analysis, application security, or cloud security, with at least 2 years in a senior or lead capacity.
- Strong hands-on Azure security experience: Defender for Cloud, Entra ID, network security, key management.
- Working knowledge of Kubernetes and container security, ideally AKS.
- Solid grasp of identity and access management, including RBAC, privileged access, and modern auth patterns (OAuth, OIDC, SSO).
- Hands-on experience owning or leading compliance programs, specifically SOC 2 and GDPR, including audit coordination and evidence management.
- Scripting for automation (PowerShell, Python).
- Comfort working across a distributed organization, coordinating with the offshore engineering teams and engaging directly with client stakeholders.
- Incident response experience, including participation in an on-call rotation and leading response during active incidents.
- Clear written communication. You can turn a finding into a decision.
Preferred Skills
- Security certifications such as CISSP, OSCP, GCIH, or Azure Security Engineer Associate.
- Experience securing telematics, IoT, or fleet platforms.
- Experience with EU data residency and multi-region deployment security.
Compensation & Benefits
- Competitive salary commensurate with experience and qualifications.
- Comprehensive health, dental, and vision insurance.
- Paid time off and holidays.
- Retirement savings plan options.
- Opportunities for career advancement and professional growth.
Velocitor Solutions Charlotte, North Carolina, USA Office
Charlotte, NC, United States
Similar Jobs
Information Technology
Consult with clients to design, implement, configure, test, troubleshoot, and support physical security systems, including video surveillance, access control, sensors, and integrations. Develop network architectures, lead design workshops, execute test plans, document solutions, and serve as a technical customer contact. Support project delivery, sales engagements, upgrades, and complex hardware/software problem resolution while managing timelines, expenses, and customer expectations. Travel and occasional off-hours work are required.
Top Skills:
Access Control SystemsAxisEnvironmental SensorsGenetecIot DevicesLanMeraki MvMilestoneNetwork SecurityVerkadaVideo Surveillance SystemsWan
Fintech • Financial Services
Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.
Top Skills:
AWSAws Secrets ManagerCi/CdCloudflareContainer OrchestrationGithub Advanced SecurityGoIamInfisicalInfrastructure As CodeKeeperOwasp Top 10PythonRuby On RailsSpaceliftTerraformWafWiz
Real Estate • Sales • Software • PropTech
Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.
Top Skills:
AgileAWSDastIamIso 27001On-PremSaaSSastSIEMSoc 2Vulnerability Management
What you need to know about the Charlotte Tech Scene
Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
