Senior Security Engineer

The Senior Security Engineer will play a key role in ensuring the organization’s security posture by implementing, managing, and maintaining security tools, technologies, policies, and processes. The role involves direct involvement in security operations, incident response, threat detection, and customer support, with a focus on AWS environments and enterprise-level security tooling. The Senior Security Engineer will collaborate closely with CloudOps, Development, and IT to enhance security, risk, and privacy measures, and will also play a critical role in mentoring other Security Engineers.

• Hands-On Security Operations: Participate in daily security operations, including threat detection, vulnerability management, SOC2 compliances efforts, and vendor management. 

• Manage Security Tooling:  Configure, implement, and maintain security tools such as Crowdstrike Falcon, Qualys, M365 InTune/ATP, and AWS security services like GuardDuty, Inspector, and WAF. 

• Incident Response: Support real-time security response efforts, ensuring effective resolution to mitigate impact. 

• Customer Support: Collaborate with customer support and development teams to address and resolve security issues impacting customers. 

• Policy Development and Compliance: Assist in the development and enforcement of security policies, risk management strategies, and compliance measures, including privacy and risk controls. 

• Security Audits: Contribute to internal and external security audits, RFPs, and vendor risk assessments, ensuring compliance with security requirements. 

• Technology Assessment: Evaluate current technology architecture to identify and address vulnerabilities. 

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or other related field equivalent work experience. 

• Minimum 5 years’ experience in Information Security and/or Cybersecurity position. 

• Minimum 3 years’ experience hands-on experience with AWS security services and tools such as Crowdstrike, Qualyz, and M365 Advanced Threat Protection. 

• Experience maintaining or contributing to SOC2 Type II certification and compliance efforts. 

• Experience in a data architecture environment, understanding of data privacy regulations and GRC solutions and a common control framework for data regulations is preferred. 

• Strong verbal and written communication skills with the ability to convey complex technical concepts clearly. 
• Able to work on-call 24/7 rotation after the first 3-6 months. 

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Family Leave (Paternity, Maternity)
• Short Term & Long Term Disability
• Training & Development
• Work Form Home