Senior Security Engineer

This is a fully remote position, open to applicants in United States, +38 more locations.

📋 Description

• Take ownership and optimize the EDR/MDR stack, detection policies, runbooks, and automation processes.

• Lead the incident response process, from investigation to containment and remediation.

• Manage endpoint security for both company-managed and BYOD devices.

• Establish device posture standards, hardening baselines, and data-access policies.

• Define identity security requirements and collaborate with IT on SSO implementation.

• Develop the RBAC model and facilitate regular access reviews.

• Implement and enhance security controls across AWS, Google Workspace, identity, and data protection systems.

• Quickly address security tickets and inquiries throughout the organization.

• Perform threat modeling and provide actionable risk assessments.

• Educate employees and foster a strong security culture within the company.

• Directly remediate cloud vulnerabilities and misconfigurations.

• Enhance detection quality, device posture management, access reviews, and the closure of high-risk security gaps.

⛳️ Requirements

• Over 5 years of experience in security operations, detection and response, or security engineering.

• Practical experience managing a contemporary EDR program, including detection logic, response runbooks, and managing investigations through containment.

• Experience in endpoint security for both managed and BYOD fleets, covering device posture, hardening baselines, and MDM.

• Knowledge of identity and access management, with a focus on access control requirements, RBAC models, and access reviews within an SSO environment.

• Experience with AWS security, including IAM, network controls, logging, and configuration management, along with direct remediation capabilities.

• Proficient in working within infrastructure-as-code environments and automating security tasks.

• Background in threat modeling across systems, processes, or vendor implementations.

• Quick and reliable response to security requests.

• Experience collaborating with IT on shared systems and establishing security requirements.

• Proven track record of driving security remediation to completion.

• Ability to communicate security risks to non-technical audiences.

• Familiarity with Terraform and CI/CD pipelines is a plus.

• Experience with zero trust networking is an advantage.

• Working knowledge of NIST, ISO 27001, SOC 2, and SOX is a bonus.

• Experience in securing a fully remote workforce is desirable.

• Experience in developing security awareness or training programs is advantageous.

• Google Workspace security administration experience is a plus.

• Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA are a bonus.

• Must be eligible to live and work full-time in one of the specified U.S. states, or in Ontario for remote technical roles based in Canada.

🏝️ Benefits

• Company equity through Restricted Stock Units (RSUs).

• 401(k) plan with company matching up to 4% of eligible earnings.

• A variety of medical plan options.

• Coverage for dental and vision needs.

• Company-funded contributions to Health Savings Accounts (HSAs).

• Life insurance and short-term disability coverage funded by the company.

• Additional long-term disability, critical illness, accident, legal, and pet insurance options.

• Access to mental health support and confidential counseling services.

• Flexible PTO for exempt employees.

• Eight company-observed holidays.

• Paid parental leave, offering up to 14 weeks at 100% pay for birthing parents and 8 weeks at 100% pay for non-birthing parents.

• Opportunities for career mobility and internal growth.

• Budgets for professional development, including certifications, conferences, and learning opportunities, subject to management approval.

• Remote-first work environment.

• Company offices located in Chicago, IL and St. Petersburg, FL for collaborative efforts.