• Collaborate within the security engineering team to design and implement security tooling. • Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code (Terraform). • Create and support CI/CD pipelines using GitHub Actions to enable reliable, automated deployments. • Collaborate with engineering teams on architecture, reliability, and continuous improvement. • Partner with software development teams to ensure effective adoption of security tools. • Implement monitoring, logging, and alerting to improve system reliability and visibility. • Support resilience through capacity planning, performance tuning, disaster recovery, and runbooks. • Troubleshoot issues efficiently and communicate outcomes clearly. • Deliver production-ready systems on time and within budget.

• Own and evolve GameChanger's multi-year security and technology strategy, including prioritization, resourcing decisions, alignment to business and parent company goals, and communication of security investments and tradeoffs to technical and executive leadership. • Lead, mentor, and grow a team of security and technology operations professionals, including setting priorities, coaching teammates, managing performance, creating opportunities for growth and impact, and creating an environment to support autonomy and ownership. • Own the direction and delivery for all key areas of information security, including product and application security, cloud security, AI security, security operations, vulnerability management, and governance, risk, and compliance functions. • Evaluate and mitigate risks across infrastructure, product, and corporate environments. • Set direction for AI security and governance as part of a secure SDLC and corporate environment, including the secure adoption of AI tooling, the security of AI-enabled product features, and AI usage governance, partnering with AI enablement and governance stakeholders across the company. • Lead the governance, risk, and compliance program, including internal assessments (for example, NIST CSF 2.0), external assessments, and clear risk reporting to leadership. • Own the security operations and incident response program for the GameChanger environment, including detection, on-call, escalation, and coordination with our parent-company security function. • Own internal technology operations, including the technology support function for our remote-first workforce and the systems and endpoints employees rely on to do their work. • Manage the BISO relationship with DSG, including decision rights, shared-services integration, and the partnership with the DSG CISO. • Lead the cross-departmental security steering committee and represent security and technology in executive forums, building alignment and buy-in for key initiatives. • Educate and influence the broader company on security principles, threats, and practices.

• The Lead Security Engineer (Cloud & Enterprise Security Engineering) is responsible for designing, implementing, hardening, integrating, and continuously improving security technologies across varied domains. • Translate security requirements into scalable and reliable technical solutions. • Engineer secure-by-default solutions, improve platform capabilities, automate security functions, and drive long-term technical maturity. • Own complex technical initiatives from design through implementation, support, optimization, and documentation. • Create and maintain actional documentation including architecture diagrams, standards, SOPs, and runbooks.

Role Description This role’s mission & overview: Camps trust Campminder to keep their data safe, and that trust is what lets them focus on running a great summer. You'll own how we protect that data end to end: - Architecting and hardening our security infrastructure - Carrying our PCI and SOC2 programs through every audit - Setting the roadmap that keeps us ahead of real threats - Being the person the engineering org comes to on security - Defining what good looks like at Campminder As a Senior Cybersecurity Engineer on our Engineering team, you will: - Manage identity and access infrastructure, including Azure conditional access, Okta SSO, and Auth0, keeping MFA and zero-trust enforced across production and internal apps - Integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines and drive remediation before code reaches production - Configure, tune, and harden WAF rules across our web applications - Own vulnerability scanning and remediation using tools like Mondoo and SecurityMetrics, and administer EDR, DLP, and SIEM/XDR tooling across servers and endpoints - Manage secrets and credentials in build pipelines, including vault-based storage, rotation, and least-privilege service accounts - Execute PCI technical controls: SAQ completion, quarterly ASV scans, and disaster recovery implementation - Harden containerized and cloud-native environments, including image scanning and Kubernetes configuration - Coordinate pen testing engagements and drive remediation against SLA timelines - Run security awareness training programs (KnowBe4, Security Journey) and maintain AI usage oversight, including approved tooling, code-gen governance, and supply-chain monitoring Qualifications - 5+ years in security engineering or DevSecOps, with hands-on ownership of both pipeline-level and infrastructure-level security - Experience configuring IAM and SSO platforms (Okta, Auth0) alongside cloud-native identity controls like Azure conditional access - Comfort embedding security directly into CI/CD workflows: SAST/DAST/SCA tooling, secrets management, and policy-as-code - A track record hardening containerized and cloud-native environments, including Kubernetes and image scanning - Experience executing PCI or similar compliance technical controls (scans, SAQs, evidence prep); program ownership isn't required, but you know how to translate auditor requirements into engineering work - Familiarity administering SIEM/XDR and EDR/DLP tooling - The judgment to triage real vulnerabilities over theoretical ones, and to know when to escalate versus fix directly - Experience running or supporting security awareness and training programs - Exposure to AI tooling governance, such as MCP inventories, code-gen release gating, or supply-chain monitoring for AI-assisted development Benefits - Robust medical, dental, and vision coverage options with generous employer contributions, plus a $500 employer HSA contribution for HSA-compatible plans - Ability to choose where you work - remotely, in the office, or a mix! - A variety of resources to support mental health and emotional well-being - 12 weeks of 100% paid parental leave for all new parents, including via adoption, surrogacy, and foster care - 401(k) with 4% company matching - Trust-Based (flexible) PTO (and yes, we use it!) - $900/year wellness allowance - Company-paid subscriptions, training, and support for using AI professionally and personally Company Description We know the best people can choose to work anywhere. Here’s a few reasons why 100+ of them choose Campminder: - With 20+ years experience of serving the industry through its digital transformation, we’re stable, profitable, and have developed a loyal customer base (that continues to grow). - We build software for summer camps, an industry that enables meaningful experiences for kids. - We work on interesting, ambitious projects that create real value for our clients. - We know our team members feel their work has an impact on the organization’s purpose. - We are genuinely committed to work/life balance. - We invest in emerging technology and cutting-edge leadership and are proud to take an "AI-Enabled" approach in our solutions. - We’ve been listed on Outside Magazine’s 50 Best Places to Work for 8 consecutive years for our values-led culture and employee experience.