Security Operations Engineer

Job overview

The Security Operations Engineer role is described as fully remote for U.S.-based candidates; the listing location is Denver, CO. Compensation is $180,000–$220,000 per year. AssemblyAI builds voice AI models and APIs, and this role supports the IT & Security team’s security and compliance program. The engineer operates and improves security controls and compliance processes, coordinating audits, risk reviews, vulnerability remediation, alert response, and customer security requests. The role helps demonstrate that security practices are consistently implemented across products, infrastructure, and internal tools.

What you'll do

• Drive SOC 2, ISO 27001, PCI 4.0, and other audit cycles
• gather evidence and coordinate with auditors
• own the Vanta compliance automation platform
• conduct vendor and third-party risk reviews
• respond to customer and vendor security questionnaires and RFP sections
• coordinate vulnerability triage and remediation tracking
• monitor and respond to security alerts
• support incident response documentation and follow-up
• maintain runbooks and operational playbooks
• build scripts, integrations, reporting, and tooling to reduce manual work.

What we're looking for

Skills & competencies

security operations engineer

remote

u.s.-based candidates

assemblyai

soc 2

iso 27001

pci 4.0

grc

vulnerability management

incident response

python

$180,000–$220,000/year

Work arrangement

• Weekend coverage required

Benefits & perks

• Competitive equity grants
• 100% employer-paid benefits
• fully remote flexibility
• 401(k) match up to 4% for U.S.-based full-time team members.

Why this role

Requires 3+ years in security operations, GRC, IT security, or a related role; 2+ years with compliance audit cycles; a relevant security certification or equivalent; Python proficiency; and experience using AI-assisted development tools. The posting specifies U.S.-based candidates and fully remote flexibility.

About the employer

AssemblyAI is hiring for this role. Industry: Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services. Sector: 99.