Staff Security Engineer

As a Staff Security Engineer, you will be a valuable member of the IT and Information Security teams, managing and improving the organizational security posture. You will help protect sensitive data by implementing and continuously monitoring a secure cloud architecture. You will work with the security toolchain in cloud environments and support the development of security best practices and standards.

Your responsibilities will also include managing vulnerability scanning and remediation efforts, responding to security alerts under supervision, and leading in root cause analysis. You will own the DAST and SAST solutions and be a key member of the incident response processes, tracking cyber actions from initial detection to final resolution.

Role Responsibilities - How You Will Make an Impact

• Analyze the organizational security posture and seek improvements on a continuous basis
• Implement and manage security solutions and controls for cloud-based infrastructure, platforms, and applications
• Conduct security assessments and audits of cloud environments to identify and remediate security vulnerabilities and misconfigurations
• Manage and optimize cloud-based security tools (e.g., EDR solutions)
• Respond to security alerts and conduct root cause analysis
• Perform incident response and track cyber actions from initial detection to final resolution
• Work with the IT team to broaden the Zero Trust framework
• Collaborate with cross-functional teams, including DevOps, IT, and development teams, to integrate security into the software development lifecycle (SDLC) and DevSecOps practices
• Automate security solutions to drive continuous compliance across the infrastructure
• Stay up-to-date with industry trends, emerging threats, and best practices in cloud security, and recommend security enhancements and improvements as needed

What We Are Looking For

• 10+ years of experience in Security and/or Cloud Operations
• Strong written and oral communication skills
• Hands-on experience with AWS
• Direct experience with intrusion prevention systems
• Experience with system logging and SIEM technologies
• Experience with cloud native security tools (e.g., IAM, WAF)
• Experience integrating Okta as an IdP into security processes
• Knowledge of incident response processes and practices
• Hands-on experience with vulnerability management tools, technologies, and methods
• Proven ability to integrate security practices into IT and/or DevOps environments
• Experience automating security processes

Nice To Have:

• Knowledge of Python and Golang
• Cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer, or Certified Cloud Security Professional (CCSP)