Security Engineer

This is a fully remote position, open to applicants in Colorado.

📋 Description

• Develop and uphold security architecture and engineering processes and procedures.

• Design system architectures that fulfill established cybersecurity requirements while aligning with customer needs.

• Define, document, and communicate security requirements effectively.

• Create security architecture requirements and implementation guidance based on NIST 800-53 and other security control frameworks.

• Architect, design, implement, maintain, and manage information system security controls and countermeasures.

• Provide methodologies and patterns for securing integration with external security system vendors and/or cloud service providers.

• Lead regular architecture and design reviews to ensure the implementation of requirements.

• Assess and actively engage in the life-cycle management of various security technologies.

• Identify security risks and control gaps within systems, designs, products, data flows, and processes; recommend corrective architecture, integrations, controls, and operations.

• Contribute to the development of security requirements, architectures, and documentation for new technology deployments.

• Conduct secure architecture and design reviews for new technology and security systems deployments.

• Collaborate with business teams to incorporate secure-by-design principles into CI/CD pipelines and Agile development processes.

• Maintain visibility into the security architecture roadmap and strategic planning.

• Leverage emerging technologies and advanced security practices across solution groups and clients.

• Build, sustain, and enhance security architecture metrics and reporting.

• Act as a subject matter expert/contributor to improve the overall security framework and program.

• Mentor junior security engineers and analysts.

• Coordinate closely with information security engineers, security stakeholders, and both internal and external software development teams.

• Perform additional duties as required and assigned.

• May require travel to Corporate Headquarters in Denver, Colorado, or other office locations across North America.

⛳️ Requirements

• A minimum of 5 years of relevant work experience in a technical field (e.g., cybersecurity, software development, or systems administration).

• Bachelor's Degree in a technical discipline such as Cyber Security, Information Technology, Computer Science, or Information Systems - or equivalent professional experience.

• Possess at least one current industry-recognized security certification; CISSP, CISM, CISA, GIAC, or equivalent experience.

• Excellent communication and interpersonal skills, with the ability to effectively communicate and collaborate with cross-functional teams, matrixed organizations, and both technical and non-technical stakeholders.

• Proven experience with the security, development, and/or management of systems compliant with NIST 800-53, NIST CSF, or ISO 27001-2022 security control frameworks.

• In-depth knowledge and understanding of the creation, implementation, and securing of cloud technologies such as AWS and Azure.

• Familiarity with Information Security risk assessment methodologies and standards.

• Highly adaptable, self-motivated, and eager to learn, with a strong passion for cybersecurity.

• Excellent verbal and written communication skills in English.

• Advanced understanding of common attacks, attack methodologies, and defense architectures.

• Experience securing multi-tenant compute services, microservices, and modern APIs.

• Working knowledge of common web and container-based vulnerabilities.

• Experience in developing and implementing Information Security policies and procedures.

• Experience in creating technical documentation, including reports, proposals, statements of work, and whitepapers.

• Must be eligible to work without sponsorship.

🏝️ Benefits

• Ongoing investment in your professional development.

• Day 1 access to a comprehensive health and wellness benefits package, including an annual wellness stipend.

• 401k with up to a 4% match and immediate vesting.

• Flexible and generous (FTO) time-off policy.

• Employee Stock Purchase Program.

• Annual bonus opportunities available in most US locations.

• 100% remote work option available.

• In-office setup near one of the locations.