SecOps Engineer

About FreeWill

FreeWill is an award-winning, social-good startup that has partnered with 2,400+ nonprofits who support our mission while generating $13B in gift commitments for nonprofits since we were founded in 2017. We’ve been featured in the New York Times, Forbes, Oprah’s magazine, and our co-CEOs have even been named to Town & Country’s “Top 50 Philanthropists” list. All of this is because we’ve figured out how to make some powerful (but complicated!) ways to donate much easier and more accessible. Our products make things easier for the donors who want to change the world and for nonprofits doing heroic work around the planet.

In the last 8 years, we’ve grown from 5 people to 200+ (all smart, tenacious, and kind), and continue to grow. We’d love to have you be a part of this adventure. We were named a "Most Loved Workplace" by both Newsweek and Best Practice Institute and in 2025, we were named as one of Forbes' Best Startup Employers and the 2025 Most Loved Workplaces® for Diversity; you can also check us out on Glassdoor! Curious about company culture and management at FreeWill? Check out the 2025 Best Manager Ever podcast featuring Anthony Sottile, FreeWill's VP of Partner Success on either Spotify or Apple.

This is a Full-time role with Excellent Benefits, allowing you to Work from Anywhere in the US (except AL, CO, or LA).

About The Role

We're seeking a SecOps Engineer to join our established security team as we continue to enhance our industry-leading security program. You'll help strengthen our robust security infrastructure and advance our cutting-edge security initiatives, including enhanced identity management, Zero Trust architecture expansion, and AI security innovations. You'll work closely with our Director of Technology & Operations, Platform Engineering Manager, and existing security team members to maintain our SOC2 compliance, enhance our incident response capabilities, and continue embedding security excellence into everything we do. This is a hands-on role where you'll contribute to protecting our mission-critical systems and the sensitive data of millions of donors and thousands of nonprofit partners.

FreeWill has set compensation and a non-negotiation policy for fairness reasons. The offers for this role will be between $125,000 - $145,000 and will include equity and benefits. We are reviewing applications on an on-going basis and are prioritizing candidates with both SecOps experience and experience working in a startup company.

What You'll Do

Security Operations & Incident Response (40%)

• Enhance our security monitoring and incident response processes across our cloud infrastructure
• Support our vulnerability management program and coordinate remediation efforts
• Optimize and maintain our existing security tooling (SIEM, EDR, cloud security platforms)
• Refine security runbooks and incident response procedures
• Support security investigations and forensics when needed

Security Enhancement Initiatives (40%)

• Expand our Single Sign-On (SSO) implementation to additional systems
• Advance our Zero Trust architecture to the next level
• Evaluate and integrate AI-specific security controls into our existing framework
• Enhance automation of security processes and controls
• Continue modernizing our authentication and authorization systems

Compliance & Partnership Support (20%)

• Support the Director of Technology & Operations with our ongoing SOC2 compliance program
• Handle security questionnaires for enterprise customers
• Lead vendor security assessments for third-party integrations
• Provide technical security expertise on customer calls
• Collaborate with our security team during peak periods
• Maintain and update security policies and procedures
• Support strategic security initiatives as needed

Who You Are

Essential Experience

• 5+ years in security operations, security engineering, or related roles
• Deep experience with cloud security (AWS/GCP/Azure)
• Hands-on experience with identity management and SSO systems
• Track record of managing security incidents from detection to resolution
• Experience with security compliance frameworks (SOC2, ISO 27001, etc.)

Technical Skills

• Proficient with security tools: SIEM, EDR, vulnerability scanners, cloud security platforms
• Strong scripting abilities (Python, Bash, or similar)
• Experience with infrastructure as code (Terraform, CloudFormation)
• Understanding of DevSecOps practices and CI/CD security
• Knowledge of Zero Trust principles and implementation

The Person We're Looking For

• Operates with high autonomy while knowing when to escalate or collaborate
• Balances security requirements with business velocity
• Communicates complex security concepts clearly to non-technical stakeholders
• Thrives in ambiguity and can context-switch effectively
• Brings a growth mindset and stays current with emerging threats

Bonus Points If You Have

• Experience with AI/ML security challenges
• Customer-facing experience with security reviews or audits
• Relevant certifications (CISSP, Security+, AWS Security, etc.)
• Experience at a high-growth startup
• Background in nonprofit or social impact technology

Hiring Process

• Recruiter Phone Screen (30 minutes)
• Hiring Manager Interview (30 minutes)
• Take Home Assignment (60 minutes)
• Final Interviews (Likely 3 separate 30 minute final interviews with FreeWill team members)
• Offer (contingent on positive references)

Please note that steps in the hiring process can and may change and the Recruiter will be your point of contact in sharing any updates in terms of the process. If you are selected to move forward in this process, the Recruiter will share more details about the hiring process and interviewers. However, this is a good estimate of what you can expect. For most roles, our hiring processes take an average of 4-6 weeks.

Benefits

In addition to the immense personal and professional satisfaction you’ll gain from helping to raise $1T for high impact nonprofits in a kind and joyful work environment, full time employees at FreeWill are eligible for the following benefits:

• Work from home
• Flexible Paid Time Off policy. We trust staff to manage their own schedules and take the time off you need to be your best, as long as your work is on track. We recommend staff take a minimum of three weeks annually
• Flexible hours
• Competitive salary
• Commuter benefits
• Company stock options
• 401k
• Medical/Dental/Vision (some single coverage medical plans are 100% employer paid, subsidized rates for spousal, parent-child, and family coverage)
• Short-term and long-term disability insurance
• Life and AD&D insurance
• Free One Medical membership
• Paid parental leave for all parents

Perks

• Regular (virtual) team events
• $250 monthly co-working budget which can be used for local co-working spaces and your home wifi bill
• $300 annual budget to outfit your home office or cover utility bills
• $1,000 referral bonuses for growing our FreeWill community
• $1,000 annual professional development budget

FreeWill is an equal opportunity employer and we value diversity. We are committed to finding talent that is not determined on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or any other characteristic protected by law. We are a remote-first company that’s able to hire in 47 states and D.C. Unfortunately, we are unable to hire in Colorado, Alabama, or Louisiana at this time. We also can’t sponsor working visas, so all applicants will need to have work authorization in the US.

Don’t check off every box in the requirements listed above? Please apply anyway! Studies have shown that marginalized communities - such as women, LGBTQ+ and people of color - are less likely to apply to jobs unless they meet every single qualification. FreeWill is dedicated to building an inclusive, diverse, equitable, and accessible workplace that fosters a sense of belonging – so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to still consider submitting an application. You may be just the right candidate for this role or another one of our openings!

Key skills/competency

• Security Operations
• Incident Response
• Cloud Security (AWS/GCP/Azure)
• Identity Management
• Zero Trust Architecture
• SOC2 Compliance
• Vulnerability Management
• SIEM/EDR Tools
• Scripting (Python/Bash)
• DevSecOps Practices