# Security Automation Engineer at Stackline

> United States · Unspecified · Security · open. Source: https://alderhq.app/jobs/greenhouse%3Astackline%3A4730525005 (read 2026-11-03).

## Facts (observed)

- Company: [Stackline](https://alderhq.app/companies/stackline)
- Location text: Seattle, WA; Seattle, WA
- Where it can be done from (inferred): United States (evidence: "Location: Seattle, WA; Seattle, WA")
- Posted: 2026-09-03 (61 days ago)
- First seen by alder: 2026-11-02 · last verified: 2026-11-03
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://job-boards.greenhouse.io/stackline/jobs/4730525005
- Skills listed (inferred): Python, LLMs

## Pay and sponsorship

- Posted pay: not posted
- H-1B filings at this company for similar roles, FY26: 3, median offered wage $149k ([US DOL OFLC LCA disclosure data](https://www.dol.gov/agencies/eta/foreign-labor/performance))

## Description (the employer's text)

Stackline is the first full-funnel connected commerce platform for the world's most innovative brands. Business leaders, product innovators, performance marketers, and analysts trust Stackline as the single source of commerce truth. Fueled by our proprietary neural network, our market insights, revenue metrics, behavior analyses, and autonomous functionality create the actions that determine success or failure.

Founded in 2014 in Seattle, we now have offices in Minneapolis, New York, Cleveland, and London. Since November 2020, Stackline has raised $180 million in strategic investments from Goldman Sachs Growth Equity and TA Associates.

Stackline is on a mission to fuel the future of commerce by bringing brands and customers closer together.

### About The Role

The Security Automation Engineer is a hands-on role responsible for Stackline's security posture, compliance program, and identity and endpoint platform. This covers a single Entra ID tenant, around a dozen federated applications, roughly 265 managed endpoints across macOS and Windows, and a SOC 2 Type II program tracked in Vanta with an external auditor.

For years, one generalist administrator ran this role — workable, but it revealed a limit: most of the week went to procedural work, running checklists and reconciling systems that disagree. That work has to be right but not done by hand. It needs a human to design it, and then to watch it run.

This role replaces that model with an engineer who automates the procedural half — evidence collection, offboarding, monitoring, and reconciliation — using scripts, services, and LLM agents. It builds on an existing internal repository of PowerShell and Python tooling, freeing capacity for the work that requires judgment: closing security gaps, hardening endpoints, driving vulnerability remediation, and carrying the compliance program.

The role splits roughly 40% security and compliance, 35% building automation, and 25% hands-on platform and deskside support. To support this on-site component, this position is based at our Seattle office 4 days per week.

### What You Will Do

Security Posture and Compliance

- Own the majority of Stackline's ~50 SOC 2 Type II controls in Vanta; route the rest to owners in Engineering, HR, Finance, and Legal.
- Drive vulnerability remediation to SLA — critical in 15 days, high in 30, medium in 90 — across endpoint findings.
- Run quarterly access reviews, the annual risk assessment, policy and vendor reassessment, and the leadership security council.
- Coordinate the annual penetration test and track findings to closure.
- Own incident response for identity and endpoint compromise: investigate, contain, document.
Automation and Agents

This is the part of the job that makes the rest of it possible. You will identify the operational work that repeats and replace it with software that runs unattended and tells someone when it fails.

- Extend the nightly evidence-collection pipeline into a maintainable, company-owned system.
- Automate employee offboarding to match the orchestration already in place for onboarding.
- Build certificate and secret expiry monitoring across federated applications and app registrations.
- Reconcile assets between the endpoint management platform and the ITSM system of record.
- Automate ticket triage, first-response drafting, and knowledge retrieval against IT documentation.
- Build with production rigor: scoped service identities, idempotent runs, structured logs, real failure alerts.
Identity and Endpoint Platform

- Administer Microsoft Entra ID: conditional access, authentication methods, groups and role assignment, SAML/SCIM integrations, app registrations.
- Administer Microsoft Intune across macOS and Windows: compliance policies, configuration profiles, application packaging and deployment, enrollment, Apple Business Manager.
- Close endpoint-hardening gaps: EDR on macOS, local administrator privilege management, centralized endpoint logging.
- Federate standalone-authenticating applications so disabling one account revokes everything.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Astackline%3A4730525005 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.