Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and uphold security measures across both cloud and corporate settings.

• Set up and manage SIEM, firewalls, IDS/IPS, WAF, endpoint protection, vulnerability management, and IAM tools.

• Detect security weaknesses and propose enhancements to fortify the security framework.

• Assist with initiatives for infrastructure hardening and secure configuration.

• Engage in the entire incident response lifecycle, encompassing detection, investigation, triage, containment, remediation, and recovery.

• Manage security incidents until resolution, including escalation and communication processes.

• Update and enhance incident response playbooks, SOPs, and runbooks.

• Conduct root cause analyses and document corrective and preventive actions.

• Keep an eye on emerging threats and evaluate their implications.

• Monitor, assess, prioritize, and coordinate the remediation of vulnerabilities.

• Track remediation efforts against SLAs and escalate any overdue risks.

• Establish and enhance security measures while automating repetitive security tasks.

• Create scripts, tools, and integrations for security monitoring, reporting, and response.

• Assist in security architecture evaluations and the secure implementation of new technologies.

• Assess security tools and technologies and provide recommendations.

• Collaborate with Omnissa regarding platform releases, security updates, vulnerabilities, and remediation efforts.

• Support vendor security assessments and technology evaluations.

• Aid in complying with SOC 2, HIPAA, PCI-DSS, GDPR, and other security and compliance initiatives.

• Maintain security policies, procedures, documentation, and evidence.

• Facilitate both internal and external audits.

• Collaborate across functions with Engineering, Product, Support, Operations, Compliance, and other teams.

• Offer practical advice on secure design and implementation.

• Articulate technical security concepts to both technical and non-technical audiences.

• Contribute to fostering accountability, continuous improvement, and shared security responsibility.

⛳️ Requirements

• 3–6 years of experience in security engineering, cybersecurity, infrastructure security, or a related technical field.

• Background in a cloud-based or SaaS environment.

• Practical experience with security monitoring, vulnerability management, incident response, and security controls.

• Familiarity with cloud security principles applicable to AWS, Azure, or GCP.

• Experience with SIEM, firewalls, IDS/IPS, WAF, endpoint protection, vulnerability scanners, or IAM.

• Solid understanding of common security threats, attack methodologies, and mitigation approaches.

• Capability to work autonomously, prioritize conflicting issues, and take ownership until resolution.

• Excellent written and verbal communication skills.

• Strong attention to detail with disciplined documentation, SOP, SLA, and follow-through practices.

• Experience supporting security and compliance standards in a regulated or compliance-centric environment.

• Preferred: Familiarity with Omnissa Horizon or VMware Horizon.

• Preferred: Experience with AWS, Azure, or Google Cloud Platform.

• Preferred: Knowledge of Kubernetes and container security.

• Preferred: Proficiency in Infrastructure as Code technologies, including Terraform or CloudFormation.

• Preferred: Experience with Identity and Access Management.

• Preferred: Skills in security automation and orchestration.

• Preferred: Background in threat intelligence or digital forensics.

• Preferred: Proficiency in Python, PowerShell, Go, or similar scripting languages.

• Preferred: Familiarity with the MITRE ATT&CK framework.

• Preferred: Understanding of Zero Trust architecture.

• Preferred: Experience with SOC 2, HIPAA, PCI-DSS, GDPR, or similar compliance frameworks.

• Relevant certifications are advantageous, including Security+, CISSP, CCSP, CISM, AWS Security Specialty, Azure Security Engineer Associate, and GIAC certifications.

🏝️ Benefits

• Comprehensive medical (including telehealth), dental, and vision coverage.

• Employee Assistance Program.

• Employer-paid basic life insurance and AD&D.

• 401(k) retirement plan.

• Flexible paid time off.

• Generous holiday schedule.

• Optional short and long-term disability coverage.

• Collaborative colleagues who enjoy tackling challenging problems together.