Senior Security Engineer

What you’ll do

As a Senior Security Engineer, you will own the results and impacts for the following:  

• Conduct comprehensive security assessments and risk analyses of systems, networks, infrastructure, and applications to identify vulnerabilities and drive improvements across both on-premises and cloud postures.
• Lead the design, development, and implementation of security controls, tool integrations, security log onboarding, incident response plans, and automation for compliance checks, alerts, and reporting. 
• Own and manage the administration of core security platforms and technologies, including EDR, SIEM, DLP, vulnerability management, firewalls, and web application firewalls. 
• Perform technical security assessments, penetration testing, code audits, and offensive/defensive security exercises to continuously evaluate, strengthen, and validate detection and response capabilities. 
• Utilize AI tools and methodologies to improve productivity, automate threat detection, vulnerability scanning, and alerting, proactively identifying and mitigating emerging threats.  
• Provide expert guidance and mentorship to internal teams on SIEM, Incident Response, WAF, and evidence requirements for frameworks such as ISO27001, SOC2, PCI DSS, and NIST.  
• Continuously monitor security events, lead security investigations, and coordinate incident response activities during active security breaches.  
• Stay current with emerging technologies (including AI, machine learning, and IoT risks), trends, threat intelligence, security certifications, and compliance regulations.
• Proactively advocate for process improvement and security innovation across the organization.  
• Prepare and deliver documentation and dashboards for stakeholders and customers, conveying actionable insights from security-related activities and findings.

Who you are

• You are an engineer at heart: Curious about how information systems function and deeply committed to their continual improvement.  
• You are an analytical thinker: Methodical, detail-oriented, and highly skilled at dissecting complex security challenges.  
• You are proactive & resourceful: Excited to uncover innovative security solutions, including automation and the integration of AI within core security processes.  
• You are a high-fidelity communicator: Able to articulate technical details clearly and effectively to both technical and non-technical stakeholders.  
• You are agile & adaptable: Thrives working independently as well as with a team, adapting rapidly when priorities shift.  
• You are resilient & accountable: Confident when facing challenges and ambiguity, holding an optimistic focus to make difficult problems into solutions with thoroughness and integrity. 

Your skill-set

Must-haves:

• 5+ years of hands-on experience with security technologies and tools such as EDR, SIEM, DLP, vulnerability management, penetration testing, SAST/DAST, and file integrity monitoring.  
• 3+ years of experience leading Security Operations, incident response, and investigations, with a solid track record of resolving security events and developing incident response plans.  
• Advanced proficiency with scripting or programming languages (Python, Bash, Go, Ruby, or Java) to automate security operations and build custom security tooling.  
• Deep expertise across cloud and hybrid environments (AWS and GCP required; Azure is a plus), with strong networking fundamentals and experience designing/implementing secure network architectures.  
• Demonstrated ability to administer and integrate core security tech with enterprise infrastructure alongside a verified familiarity with key frameworks: ISO27001/27002, NIST, CIS, PCI DSS, SOC2, ITIL, COBIT.

Nice-to-haves:

• Prior software