Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of security across MOXFIVE's cloud infrastructure, AI platforms, and corporate environment.

• Safeguard platforms, cloud environments, and AI systems utilized by customers during cyber-attacks.

• Develop detection and response strategies for MOXFIVE's ecosystem.

• Enhance the security posture of cloud and container environments to a defensible state.

• Ensure the security of the software supply chain.

• Implement controls that demonstrate the protection of customer and partner data.

• Secure endpoints, identities, email, and business applications.

• Design and reinforce security boundaries around customer information.

⛳️ Requirements

• Over 6 years of hands-on experience in security engineering, with a minimum of 3 years focused on securing production cloud environments.

• Extensive experience in securing workloads on leading public cloud platforms, covering identity and access management, network segmentation, encryption and key management, logging, and organizational guardrails.

• Practical experience securing container orchestration platforms and containerized workloads, including image hardening, admission control, and runtime protection.

• Hands-on experience with cloud security posture management, vulnerability prioritization, and cloud workload protection.

• Experience with enterprise EDR and XDR platforms, from policy tuning to detection triage and response.

• Proficiency in building detections and conducting investigations across cloud, identity, and endpoint telemetry.

• Strong knowledge of identity security, featuring SSO, MFA, conditional access, and least privilege access for engineers and service accounts.

• Experience in securing CI/CD processes and the software supply chain, encompassing static analysis, secret scanning, infrastructure-as-code scanning, dependency risk assessment, and artifact integrity.

• Familiarity with infrastructure-as-code and the capability to resolve issues directly rather than just filing tickets.

• Proficient in Python or Go for automation, tooling, and detection engineering.

• Experience with large-scale secrets management.

• Background in securing corporate IT, including device management, endpoint hardening, and email and SaaS application security.

• Good judgment in handling sensitive, privileged, and regulated data.

• Experience in incident response, DFIR, or within a managed detection and response setting.

• Experience securing LLM and agentic AI systems, focusing on prompt injection defenses, action authorization, and isolating untrusted execution.

• Familiarity with Zero Trust access architectures.

• Experience with multi-tenant SaaS isolation and third-party integrations.

• Working knowledge of SOC 2, ISO 27001, or similar frameworks.

• Background in offensive security, red teaming, or cloud penetration testing.

• Relevant certifications such as OSCP, GCIH, GCFA, or cloud security specialty certifications.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and certification reimbursement.

• Flexible work hours and remote work options.

• Collaborative and inclusive work environment.