Sr. Security Engineer

About Sayari: Sayari is the transparency company providing the public and private sectors with immediate visibility into complex commercial relationships by delivering the largest commercially available collection of corporate and trade data as a dynamic model of global ownership and trade activity. Sayari’s solutions harness this model to enable risk resilience, complex investigations, and clear-eyed business decisions. Sayari is headquartered in Washington, D.C., and its solutions are used by thousands of frontline analysts in over 35 countries.
Our company culture is defined by a dedication to our mission of using open data to enhance visibility into global commercial and financial networks, a passion for finding novel approaches to complex problems, and an understanding that diverse perspectives create optimal outcomes. We embrace cross-team collaboration, encourage training and learning opportunities, and reward initiative and innovation. If you like working with supportive, high-performing, and curious teams, Sayari is the place for you.
POSITION DESCRIPTIONSayari’s Information Security team is growing, and we’re looking for a Security Engineer to architect, implement, and advance the security of our cloud infrastructure. This role will have a primary focus on Kubernetes, overall cloud platform security, and robust network security architectures. You will apply your technical expertise to build, configure, and manage best practice security measures. This position is for someone who thrives on rapidly improving security posture through direct technical contribution, innovation, and efficient execution. Your well-rounded foundational knowledge of networking, Linux, and security best practices, particularly as they apply to containerized and cloud-based systems, will be crucial. Example projects include hardening Kubernetes clusters, designing and implementing secure network segmentation strategies in the cloud, building advanced threat detection for cloud workloads, and automating security controls within our CI/CD pipelines. You'll work in close collaboration with our Infrastructure, DevOps, Application, and Data teams to embed security into our operations. Your philosophy on security should balance stringent, threat-informed controls with the practical needs of a fast-paced, innovative business. The ideal candidate will possess a strong technical background, capable of tackling diverse challenges from writing security-as-code to architecting and implementing secure cloud infrastructure and supporting compliance initiatives.

JOB RESPONSIBILITIES

• Architect, deploy, and manage comprehensive security solutions, particularly for our Kubernetes clusters and multi-cloud environments (GCP, AWS), focusing on network security, workload protection, system hardening, IAM, and data security.
• Collaborate closely with Infrastructure and DevOps teams to integrate security best practices into CI/CD pipelines and leverage automation tools (e.g., Infrastructure as Code) to proactively address vulnerabilities in cloud and Kubernetes deployments.
• Design, implement, and manage automated Identity and Access Management (IAM) strategies, ensuring least-privileged access controls across all cloud and Kubernetes resources.
• Partner with application and data teams to ensure they are deploying secure applications and their deployment pipelines into secure cloud and Kubernetes infrastructure, advising on and implementing secure coding practices and infrastructure configurations.
• Ensure the SIEM is properly ingesting and enriching security logs from cloud, Kubernetes, and network sources.
• Actively participate in security audits, providing evidence of implemented controls and ensuring adherence to security policies within cloud and containerized environments.
• Ensure compliance with relevant laws, regulations, and industry standards (e.g., FedRAMP, SOC 2, ISO 27001), with a specific focus on their application to cloud and Kubernetes.
• Create and maintain detailed documentation, including security architecture diagrams for cloud and Kubernetes, network security policies, secure configuration baselines, and procedure.
• Research and apply AI technology extensively where it makes sense to improve the team's capabilities in areas like threat detection, anomaly detection, and security automation.
• Stay in tune with security trends, emerging threats, and new technologies in cloud, container, and network security, and champion their adoption where appropriate through proofs-of-concept and implementation.

SKILLS & EXPERIENCE

• 7+ years of experience in a security engineering role, with a significant focus on cloud environments and direct implementation of security controls.
• Significant experience with cloud security on platforms such as GCP and AWS.
• Significant experience with K