Senior Security Engineer

About the job

The Role

We’re looking for a Senior Security Engineer to take a hands-on role across security operations, offensive security, and cloud security. You’ll combine an attacker mindset with defensive expertise to identify vulnerabilities, strengthen infrastructure, and improve detection and incident response.

What this role owns

• Lead security monitoring, threat detection, and incident response, including SIEM tuning and threat intelligence.

• Conduct hands-on penetration testing and vulnerability assessments across applications, networks, and cloud environments.

• Manually identify and validate vulnerabilities such as SQLi and XSS, and investigate sophisticated attack patterns in raw SIEM/log data.

• Strengthen cloud environments, CI/CD pipelines, containers, and Zero Trust controls.

• Build and improve security playbooks, threat models, and automated security workflows using scripting, IaC, and AI tooling.

You’ll be a fit if you are

• Hands-on and security-minded, with experience across both offensive and defensive security.

• Comfortable performing manual penetration testing rather than relying solely on automated scanners.

• Strong in SIEM/log analysis and able to identify threats beyond pre-built alerts.

• Experienced with cloud security, vulnerability management, and modern security tooling.

• Comfortable working autonomously and mentoring others in a growing security team.

Preferred background

• 5+ years of experience in security engineering, penetration testing, incident response, or a related field.

• OSCP or equivalent offensive security experience.

• Strong knowledge of OWASP, MITRE ATT&CK, threat modeling, and common attacker TTPs.

• Experience with AWS security, SIEM platforms, scripting/automation, and tools such as Burp Suite, Metasploit, Nmap, or equivalent.

• Experience securing AI/cloud-based services is a plus.