Enterprise Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and uphold secure network architectures, which encompass segmentation, firewall policies, and access control protocols.

• Set enterprise security baselines, implement system hardening standards, and establish configuration management policies.

• Oversee security architecture evaluations and advise engineering teams on secure design practices.

• Develop, execute, and sustain cloud security controls across Azure, Google Cloud Platform, and AWS.

• Facilitate secure connections between on-premises environments and cloud-hosted applications and infrastructure.

• Implement cloud hardening standards, encryption settings, and secure deployment methodologies.

• Engage in GKE security initiatives and cloud-native modernization efforts.

• Create secure configurations for Cloud SQL.

• Configure, manage, and enhance SIEM and security monitoring technologies, including Microsoft Sentinel and CrowdStrike Falcon.

• Formulate detection rules, alert logic, and automated security workflows.

• Oversee PKI and security certificates, encompassing lifecycle management, renewals, and deployment automation.

• Conduct security assessments of infrastructure across servers, networks, applications, and cloud environments.

• Address or coordinate the remediation of vulnerabilities and misconfigurations.

• Design and implement secure data handling, encryption, and key management practices.

• Utilize AI-driven tools and analytics while ensuring responsible human oversight.

⛳️ Requirements

• A minimum of 5 years of experience in enterprise security engineering, infrastructure security, or systems engineering with substantial security responsibilities.

• Proven experience in designing and securing corporate back-office and hybrid cloud environments.

• Proficiency in Azure, Google Cloud Platform (GCP), and cloud-native security functionalities.

• Practical experience with Microsoft Sentinel, CrowdStrike Falcon, or other SIEM/XDR/EDR technologies.

• Fluency in Kusto Query Language (KQL) and Falcon Query Language (FQL).

• Strong grasp of identity and access management, including Active Directory, Azure AD/Entra ID, IAM policies, SSO, MFA, and PAM solutions.

• Expertise in infrastructure-as-code (IaC) tools.

• Automation scripting experience using PowerShell or Python.

• In-depth knowledge of networking, encryption, certificates, and security protocols.

• Exceptional communication skills with the ability to collaborate across cross-functional teams.

• Applicants must not require employer-sponsored work visas.

🏝️ Benefits

• Medical Insurance

• Life Insurance

• Dental Insurance

• Vision Insurance

• PTO

• Paid Parental Leave

• Paid Holidays

• Short Term Disability

• Long Term Disability

• 401K

• Educational Assistance

• Annual bonus eligibility

• Full range of benefits