Security & Compliance Engineer

Nomagic is a company focused on robotics, aiming to teach robots the real world. The role involves owning security and compliance across the company, covering corporate environments and edge stations deployed at customer sites.

• 5+ years of hands-on experience in information security, IT security, or similar roles
• Practical understanding of endpoint and identity security including MDM, SSO, SAML, access control models
• Solid understanding of network security architecture including segmentation, trust boundaries, and secure remote access
• Hands-on experience with GRC frameworks such as ISO 27001, SOC 2, including third-party risk assessment and security questionnaires
• Ability to write and review security policies
• Scripting ability for automation in languages such as Python, Bash, PowerShell
• Fluent communication in English

Nice to have:

• Experience with Vanta or similar GRC platforms (e.g., Drata, Tugboat Logic)
• Familiarity with SIEM tools, especially Wazuh
• Exposure to OT, industrial, or edge/hardware environments
• Cloud security experience, preferably in GCP
• Background in a tech scaleup

• Own ISO 27001 and SOC 2 compliance posture day-to-day on Vanta, including evidence, controls, audits, and closing gaps
• Co-create policy for AI tooling usage to enhance productivity while maintaining security best practices
• Define security standards for endpoints, identity, and network, and verify implementation by outsourced IT provider
• Run third-party risk process, assessing vendor security posture and managing customer security questionnaires
• Monitor and respond to security events through SIEM, alert triage, investigation, and detection improvement
• Collaborate with DevOps/Infrastructure team on security topics spanning cloud, edge, and OT environments