Cybersecurity Engineer III

Overview

Position: Sr. Cybersecurity Engineer, Platform

 

Salary:  Starting at $133,000/year+ D.O.E

*Actual compensation may vary from posting based on geographic location, work experience, education, and/or skill level.

 

Location: Santa Ana, CA (on-site preferred; open to remote candidates located beyond a 31-mile radius)

 

Position Summary:

The Sr. Cybersecurity Engineer leads the design, implementation, continuous management, and optimization of enterprise security platforms to defend against sophisticated threats in cloud-native, hybrid, and multi-cloud environments.

 

This senior role drives strategic security initiatives—including innovative product evaluations, PoC testing, and tool enablement—integrates AI/ML for proactive defense, mentors junior engineers, and partners closely with IT, DevOps, development, and procurement teams to embed resilient, scalable security throughout the organization.

 

The position demands deep expertise in platform management, automation, AI security, quantum-readiness, threat mitigation, and emerging technology evaluation to sustain a dynamic, proactive security posture.

 

*Disclaimer: Identity Verification checks are in place throughout the Candidate journey to prevent candidate fraud  

Responsibilities

Strategic Security Architecture and Platform Management

• Design and implement advanced zero-trust architectures with continuous authentication, verification, micro-segmentation, and identity-centric controls across cloud-native and hybrid environments.
• Own the deployment, ongoing management, configuration, optimization, and administration of core security platforms, including next-generation SIEM, EDR/XDR, firewalls, IAM/identity governance, WAF, CSPM, and related tools.
• Lead platform lifecycle activities such as performance tuning, policy development, integration enhancements, and capacity planning to ensure reliability, scalability, and alignment with evolving threats.
• Develop and maintain multi-year security roadmaps that incorporate emerging threats (e.g., AI-powered attacks, quantum risks, supply chain vulnerabilities) while aligning with business objectives and platform innovation needs.

Advanced Threat Detection and Mitigation

• Build and refine AI/ML-enhanced detection rules, automated threat-hunting playbooks, and intelligent response orchestration workflows within managed security platforms.
• Lead proactive threat-hunting initiatives to detect and neutralize advanced persistent threats (APTs), AI-generated attacks, insider risks, and supply chain compromises.
• Integrate real-time threat intelligence feeds and AI-driven analytics to improve detection accuracy, reduce false positives, and enable predictive risk mitigation across platforms.

Incident Response

• Support complex, high-impact incident response efforts, including containment, forensic analysis using platform telemetry, eradication, recovery, and root-cause investigation.
• Conduct post-incident reviews, develop preventive strategies, and deliver executive-level briefings and reports.
• Coordinate cross-functional response to incidents and emerging attack vectors.

Vulnerability and Risk Management

• Oversee enterprise vulnerability management programs, including automated scanning, red team/purple team exercises, and prioritized remediation tracking integrated with security platforms.
• Manage risk remediation in collaboration with IT, DevOps, application, and third-party teams, with focus on software supply chain, API security, and platform-specific exposures.
• Maintain risk registers, compliance reporting, and quantum-readiness assessments to support evolving regulatory and threat landscapes.

Automation and DevSecOps Integration

• Automate security controls, workflows, and platform operations using Python, PowerShell, Bash, Ansible, Terraform, and infrastructure-as-code (IaC) tools.
• Embed security-as-code practices into CI/CD pipelines, including automated scans for vulnerabilities, secrets management, AI model security, and platform integrations.
• Drive scalability, efficiency, and innovation in security operations through AI-augmented automation, continuous platform monitoring, and enablement of self-service security capabilities for development teams.

Innovative Product Evaluations and Enablement

• Lead evaluation, selection, and enablement of new and emerging security products, technologies, and platforms through structure