Senior SecOps Engineer

About the role

CSC Generation is the AI-native holding company re-engineering omnichannel retail. We acquire iconic brands and transform them with Genesis, our operating platform combining a Data Fabric, Automation Engine, proprietary tools, and shared services to modernize operations, elevate customer experience, and expand margins. With $1B+ in revenue across 13 brands, our portfolio includes Sur La Table, Backcountry, One Kings Lane, and others that serve as real-world innovation labs.

Reports to: CTO/CIO

Location: Houston, TX (Hybrid); Toronto, ON (Hybrid)

About the Role The threat landscape has shifted — autonomous AI agents are probing infrastructure at machine speed, chaining misconfigurations, and adapting in real time. We need an engineer who can build AI-aware defenses across our cloud environment and codebases before we need them, not after.

As SecOps Engineer, you will write code, stand up pipelines, and integrate with observability stacks to turn raw signal into actionable security insight across our portfolio's AWS infrastructure. Within 6–12 months you will have production security tooling running in CI/CD, real-time threat detection correlated through ELK and Grafana, and AI-powered perimeter monitoring actively protecting our cloud footprint.

This is a lean team. You will own a lot, move fast, and make decisions with full end-to-end responsibility.

What You'll Do - Build and run analysis tools that scan existing codebases for security vulnerabilities and produce clear, actionable remediation guidance for engineering teams.

- Integrate automated security scanning into GitHub Workflows (CI/CD) so every commit and PR is continuously reviewed for new vulnerabilities.

- Design and build threat detection tools that work alongside observability platforms (ELK, Grafana) to correlate signals and identify active security threats in real time.

- Build or deploy AI-powered tools that monitor the cloud perimeter (AWS) for anomalous or malicious activity and drive automated or semi-automated response.

- Own the full lifecycle of security tooling you build — from prototype to production — including monitoring for reliability and false-positive rates.

- Partner with engineering teams to help them understand and act on findings, and iterate on tooling based on their feedback.

- Translate security findings into specific, understandable remediation steps for engineers who may not have deep security backgrounds.

Required Qualifications - Hands-on experience with AWS infrastructure (IAM, VPC, networking/security groups, common compute/storage services) and how they are commonly misconfigured or attacked.

- Experience working with GitHub Workflows / GitHub Actions and building CI/CD-integrated tooling.

- Practical experience using AI/LLM tools to build analysis or automation tooling (e.g., code review, log analysis, anomaly detection, or classification).

- Strong understanding of common application and infrastructure vulnerability classes (OWASP Top 10, cloud misconfigurations, supply chain risks).