Sr. Security Engineer

We are looking for a Security Engineer to help protect our infrastructure, cloud environment, applications, and data from security threats.

This role will work closely with DevOps and Engineering teams to monitor security risks, respond to incidents, improve security controls, and support audit/compliance requirements.

Cloud experience is preferred. AWS experience is a plus, but candidates with other cloud backgrounds are welcome if they have strong fundamentals and willingness to learn.

Key Responsibilities

• Monitor systems, infrastructure, cloud environments, applications, and network activity for suspicious behavior or unauthorized access.

• Investigate security alerts, perform initial incident triage, and coordinate remediation with relevant teams.

• Review infrastructure and cloud configurations to identify security risks and misconfigurations.

• Support secure implementation of access control, least privilege, MFA, network segmentation, encryption, logging, and monitoring.

• Perform or coordinate vulnerability assessments and track remediation progress.

• Assist in preparing security policies, procedures, audit evidence, and compliance documentation.

• Support security awareness activities and promote security best practices across the organization.

• Continuously improve security monitoring, detection, response, and operational processes.

Requirements:

• Good understanding of infrastructure security, cloud security, networking, operating systems, and access control.

• Familiarity with vulnerability management, log analysis, incident response, and security monitoring.

• Basic understanding of database, application, and container security.

• Able to analyze security risks and provide practical remediation recommendations.

• Able to work with cross-functional teams such as DevOps and Engineering.

• Willing to learn new technologies, platforms, and security practices.

Preferred Qualifications:

• ⁠ ⁠Experience with cloud platforms such as AWS, GCP, or similar.
• ⁠ ⁠Experience with Kubernetes, containers, managed databases, or cloud-native infrastructure.
• ⁠ ⁠Experience with SIEM, IDS/IPS, vulnerability scanners, endpoint protection, or cloud security tools.
• ⁠ ⁠Familiarity with Infrastructure as Code, CI/CD, or DevSecOps practices.
• ⁠ ⁠Experience supporting ISO 27001, PCI DSS, financial industry, or regulatory audits.
• ⁠ ⁠Relevant certifications such as Security+, CEH, AWS Security, Azure Security, Google Cloud Security, ISO 27001, CISSP, or similar are a plus.

Work Location: In person