Senior Security Engineer

This is a fully remote position, open to applicants in Colorado.

📋 Description

• Take charge of KPA's enterprise security platforms, which include CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo, KnowBe4, and associated technologies.

• Spearhead initiatives for vulnerability management, endpoint security, identity security, privileged access, penetration testing, and security hardening.

• Direct security incident response efforts, including investigations, containment, remediation, and conducting post-incident reviews.

• Manage SOC 2 controls, security audit obligations, and technical compliance initiatives.

• Oversee Cisco Meraki security, VPN infrastructure, network security controls, and secure cloud connectivity solutions.

• Ensure security for Azure, AWS, Microsoft 365, Entra ID, AWS Identity Center, Auth0, and cloud-native workloads.

• Administer and enhance identity governance, SSO, SCIM, Conditional Access, PIM, privileged accounts, service accounts, and authentication architectures.

• Collaborate with DevOps to embed security within CI/CD processes, Infrastructure as Code, containers, Kubernetes, and cloud workloads.

• Enhance cloud security posture management, workload protection, identity controls, logging, alerting, detection engineering, and remediation efforts.

• Manage email security across Microsoft 365, SendGrid, Amazon SES, SPF, DKIM, DMARC, and implement phishing protection measures.

• Develop security automation utilizing PowerShell, Python, Microsoft Graph, REST APIs, and AI-assisted development tools.

• Lead vendor and SaaS security evaluations while supporting third-party vendor risk management.

• Advance security awareness programs, policies, standards, and technical procedures.

• Contribute to AI security and governance initiatives, including ChatGPT Enterprise, Claude, and MCP.

• Assist with security architecture assessments to identify security vulnerabilities, technical debt, and opportunities for modernization.

• Act as the senior technical advisor to the Director of Security & Technology, serving as the primary escalation point for complex security challenges.

⛳️ Requirements

• Minimum of 5 years of experience in security engineering, cloud security, infrastructure security, or a comparable senior technical role.

• Deep understanding of identity security, endpoint security, vulnerability management, network security, incident response, and zero trust principles.

• Proven experience in securing Azure, AWS, Microsoft 365, Entra ID, Windows, and Linux environments.

• Familiarity with CI/CD pipelines, Kubernetes, container security, application security scanning, and DevSecOps methodologies.

• Proficiency in scripting and automation using PowerShell, Python, REST APIs, or similar technologies.

• Experience in supporting SOC 2 and NIST CSF or similar security and compliance frameworks.

• Strong communication, documentation, project leadership, and problem-solving capabilities.

• Bachelor's degree in Computer Science, Information Technology, or Cybersecurity, or equivalent experience is required.

• Relevant certifications such as CompTIA Security+, CISSP, CCSP, AWS Certified Security, or equivalent qualifications are preferred.

🏝️ Benefits

• Potential for an annual bonus of 10%.

• Flexible remote work arrangement.