Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and maintain automation frameworks and scripts (Python, Bash, Terraform) to optimize security processes and workflows.

• Deploy and manage secure, scalable infrastructure on AWS utilizing Terraform through Scalr and Harness, with additional operations in GCP and Azure.

• Construct, support, and enhance AWS Step Functions, Lambda, and EventBridge workflows from a centralized tooling account that functions across multiple spoke accounts within the AWS Organization.

• Administer Kubernetes clusters using Helm charts, incorporating in-house security automation on pods that integrate with CSPM tools and Jira ticketing systems.

• Develop and enforce cloud security guardrails utilizing OPA, Guardrails, Service Control Policies (SCPs), IaC security gates, and tagging policies.

• Design, build, and maintain integrations with Splunk Enterprise Security (ES), including log source onboarding, index management, correlation search tuning, and configuration of automated response actions.

• Create and implement Splunk SOAR playbooks to automate security tasks, decrease Mean Time to Respond (MTTR), and enhance SOC capabilities.

• Act as the subject matter expert for Okta Identity Engine (OIE) — creating and managing scalable SSO policies, modern authentication (SAML/OIDC), and identity lifecycle processes.

• Utilize AWS security services (GuardDuty, Macie, IAM, Control Tower, KMS, CloudTrail, EventBridge) to develop event-driven automations for threat detection and response.

• Manage the in-house Jira process for CSPM findings and the accompanying data pipeline that supports AWS QuickSight dashboards.

• Collaborate with cross-functional teams (Dev, Platform, Security, and SOC) to integrate security automation into CI/CD pipelines and promote a shift-left security approach.

• Perform risk assessments, enforce security best practices, and continuously enhance our defensive posture through automation and tooling.

• Monitor, troubleshoot, and optimize cloud infrastructure and security systems to ensure high availability, performance, and compliance.

• Keep abreast of AWS best practices, security trends, and emerging technologies to foster continuous improvement.

⛳️ Requirements

• Over 10 years of experience.

• Extensive hands-on experience with:

• Terraform, Kubernetes (EKS + Helm), Docker, and scripting in Python & Bash

• AWS services including Step Functions, Lambda, EventBridge, GuardDuty, Macie, IAM, Organizations, and QuickSight

• Policy-as-code tools (OPA, Guardrails, SCPs) and IaC security scanning

• Administration of Splunk Enterprise Security (ES), log onboarding, correlation search tuning, and automated responses

• Development and automation of Splunk SOAR playbooks

• Okta Identity Engine (OIE), SSO, SAML, and OIDC protocols

• Demonstrated ability to operate independently with minimal supervision while effectively collaborating with cross-functional teams and providing technical guidance.

• Experience in designing automation solutions that minimize MTTD and MTTR.

• Strong understanding of cloud security principles, compliance frameworks, and secure infrastructure design.

🏝️ Benefits

• Employees (and their families) who meet the eligibility criteria outlined in applicable plan documents can participate in our medical, dental, vision, and basic life insurance programs and may enroll in our company's 401(k) plan.

• Employees will also be eligible for Time Off and Paid Sick Leave according to the company's policies.

• Employees will benefit from paid holidays throughout the calendar year.

• The hired applicant may receive Restricted Stock Units and annual bonuses based on eligibility and performance criteria defined in the respective plan documents and policies.