Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Proactively recognize, prioritize, and address security vulnerabilities within AWS infrastructure, endpoints, applications, and identity systems.

• Operate and optimize CrowdStrike Falcon, AWS GuardDuty, CloudTrail, and the managed SOC/MDR pipeline.

• Supervise detections, sensor health, prevention policies, and escalations with a 24x7 managed security provider.

• Enhance detection accuracy and minimize unnecessary alerts through tuning and automation.

• Take ownership of vulnerability management across cloud, endpoint, and relevant on-premises assets.

• Oversee Qualys or equivalent scanning, risk-based prioritization, remediation tracking, verification, and approved exceptions.

• Organize Patch Tuesday reviews and annual external penetration testing activities.

• Integrate Snyk or similar SAST, DAST, SCA, and container security scanning into GitHub Actions and development workflows.

• Develop AI-assisted workflows for alert triage, scan analysis, remediation guidance, and evidence collection.

• Coordinate technical security tasks in support of the annual SOC 2 Type II audit.

• Promote GovRAMP/FedRAMP readiness through mapping NIST SP 800-53 controls, gap remediation, evidence management, and POA&M tracking.

• Manage security incident response, encompassing investigation, containment, recovery, root cause analysis, and documentation.

• Maintain and test incident response plans and engage in tabletop exercises.

• Create and uphold security policies, procedures, and playbooks.

• Enhance identity and access security across Microsoft Entra ID SSO, Cloudflare Zero Trust, Auth0, and least-privilege IAM.

• Maintain a security Risk Register and convey significant risks and recommendations to leadership.

• Set up security guardrails for company AI adoption, including data protection, vendor risk, and prompt injection awareness.

• Lead technical security responses for customer questionnaires, RFPs, HECVAT assessments, and vendor due diligence requests.

• Assist in security awareness initiatives, including monthly training and employee education.

• Mentor technical teams and collaborate with Product, Engineering, Support, and other departments.

• Convert complex security risks into clear, actionable recommendations for both technical and nontechnical audiences.

⛳️ Requirements

• Over 5 years of experience in security engineering, cloud security, or a closely related discipline.

• Demonstrated success in securing AWS workloads, including VPCs, Security Groups, IAM, GuardDuty, CloudTrail, KMS, and Secrets Manager.

• Practical experience with EDR platforms (CrowdStrike preferred), vulnerability management (Qualys or similar), SIEM/MDR operations, and application security scanning (Snyk or similar).

• Familiarity with SOC 2 Type II and NIST SP 800-53 standards.

• Hands-on experience leveraging AI tools to enhance security or technical workflows, with sound judgment regarding data protection and risk.

• Proficient in writing scripts using Python, PowerShell, or Bash.

• Understanding of identity and access management, least-privilege principles, and modern Zero Trust practices.

• Capable of independently managing projects, prioritizing competing security risks, and coordinating work across teams.

• Effective and confident communicator with engineers, executives, auditors, and customers.

• Familiarity with modern DevOps and CI/CD security practices, including GitHub Actions and automated security testing.

• Applicants must have legal authorization to work in the United States.

• RTA is not able to provide employment visa sponsorship.

• Preferred: Experience with GovRAMP or FedRAMP.

• Preferred certifications: CISSP, CISM, CCSP, OSCP, Security+, AWS Security Specialty, or other AWS certifications.

• Preferred experience with CJIS, PCI, HIPAA, Terraform/CloudFormation, Cloudflare Zero Trust, Microsoft Entra ID, Kubernetes RBAC, and AI/LLM integrations.

🏝️ Benefits

• 401(k) plan with a 6% Safe Harbor match (100% vested starting day one).

• Flexible PTO model built on trust and manager-approved time off.

• Cigna PPO and HSA medical plan options with company contributions ($780–$1,950 annually).

• Garner Health HRA program: opportunity for reimbursement up to $1,000 individual / $2,000 family.

• Wellness rewards of up to $350 annually.

• Resources for virtual care and mental health support.

• Company-sponsored dental, vision, EAP, life, STD, LTD, legal plan, and identity theft protection options.

• Additional employee perks, wellness initiatives, and discount programs.

• Fully remote work environment.

• Minimal travel, generally up to 10% depending on business needs.

• Reasonable accommodations available for qualified individuals with disabilities.