Senior Security Engineer

This is a fully remote position, open to applicants in Arizona, +4 more states.

📋 Description

• Foster and advocate for robust security measures and mitigations across teams through architectural evaluations.

• Analyze system designs and implementations, evaluate security posture, and provide architectural suggestions utilizing threat modeling.

• Employ scripts and internal tools to guarantee the security agent suite's coverage across enterprise platforms.

• Create automation using Python and other programming languages to facilitate system integration.

• Draft policies and procedural documentation.

• Supervise regular vulnerability assessments across network, container, and cloud environments.

• Design and establish infrastructure security measures for servers, cloud environments, and container platforms.

• Contribute to HiTrust and ISO 27001 compliance efforts.

• Assist in customer and vendor audits.

• Engage in the on-call roster, including hours beyond standard business hours.

• Manage security tools related to endpoint protection, mobile device security, vulnerability management, network protection, transmission protection, password management, access control, and security awareness.

⛳️ Requirements

• Over 4 years of experience in security engineering, concentrating on infrastructure, application, and cloud security.

• Practical experience securing Kubernetes (K8s) and container platforms in live production environments.

• Skilled in scripting and automation using Python, Bash, Terraform, or similar technologies.

• Ability to thrive in a fast-paced environment.

• Strong communication skills.

• Capability to work both independently and collaboratively within a team.

• Demonstrated experience in an Engineering discipline.

• Experience in building and maintaining security systems in both cloud and on-premises settings.

• Hands-on knowledge of firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, and content filtering.

• Familiarity with network security, networking technologies, and tools for system, security, and network monitoring.

• Understanding of contemporary security principles, techniques, protocols, and best practices, including CIS benchmarks, NIST, and OWASP.

• Knowledgeable in web technologies, web applications, web services, APIs, and network/web protocols.

• Strong problem-solving skills and the ability to perform under pressure.

• Occasional travel within the U.S. may be required.

• Bachelor's degree in Computer Science or a related field.

• Relevant certifications such as CISSP, CCSP, GIAC, or OSCP.

• Capability to work at a computer terminal for extended durations and meet the listed physical demands.

• Candidates must be authorized to work for any employer in the U.S.

• Visa sponsorship is not available.

🏝️ Benefits

• Dental, vision, and various group medical plans.

• 401(k) retirement savings plan.

• Group life insurance.

• Accidental death and dismemberment (AD&D) insurance.

• Flexible spending account (FSA).

• Health savings account (HSA).

• Commuter benefits.

• Employer-funded short-term (STD) and long-term disability (LTD) insurance.

• Supplemental spouse life insurance.

• Legal insurance.

• Employee assistance program.

• Home health testing kits.

• Fertility medication discount program.

• Flexible vacation policy.

• Accrued paid sick leave.

• 10 paid holidays.

• 2 floating holidays for full-time non-exempt employees.

• Eight weeks of paid parental leave for eligible employees.

• Additional paid weeks for the birthing parent.

• 4 weeks of paid caregiver leave.

• Monthly Lifestyle Spending Account allowance.