Senior Security Engineer

This is a fully remote position, open to applicants in Utah.

📋 Description

• Take charge of the company’s overall security posture.

• Develop and sustain the annual security strategy, compliance objectives, and risk management frameworks.

• Assess, choose, and allocate budget for security tools.

• Lead or prepare the organization for compliance frameworks such as SOC 2 Type II and GDPR.

• Formulate, test, and update Incident Response and Disaster Recovery playbooks.

• Strengthen AWS/GCP cloud environments, oversee IAM policies, and configure network security.

• Incorporate SAST/DAST security scanning into deployment pipelines and perform code reviews.

• Implement and oversee MDM, MDR solutions, and identity providers.

• Establish log aggregation and analyze security alerts and anomalies.

• Oversee vulnerability and patch management programs based on risk prioritization.

• Conduct phishing simulations and educate the remote workforce on security best practices.

• Respond to security questionnaires and assist in sales enablement.

• Connect high-level risk management with practical security engineering.

⛳️ Requirements

• Minimum of 4 years in dedicated cybersecurity positions.

• Hands-on experience with at least one major cloud service provider (AWS, GCP, Azure).

• Familiarity with modern security stack tools (e.g., Wiz, Datadog, Elastic, SentinelOne).

• Proficiency in writing scripts in Python, Bash, Go, Javascript, or similar languages to automate security tasks and integrate APIs.

• Direct involvement in leading or significantly contributing to a SOC 2 audit.

• Ability to thrive in a fast-paced environment with minimal oversight.

• Experience with GRC automation tools (Vanta, Drata).

• Knowledge of frameworks such as ISO 27001, HIPAA, PCI DSS, or GDPR.

• Experience with infrastructure-as-code and container security (Terraform, Kubernetes, Docker), including policy-as-code and guardrails.

• Expertise in endpoint and device management (Jamf, Kandji, Intune) and corporate IT security fundamentals.

• Understanding of securing AI/LLM-enabled products and the use of internal AI tools.

• Relevant certifications such as AWS Security Specialty, CISSP, OSCP, GCIH, or similar credentials.

• Ability to articulate risk to both executives and engineering teams.

• Capacity to identify security vulnerabilities and provide remediation recommendations.

• Proven history of establishing security programs from the ground up.

🏝️ Benefits

• Remote-friendly work policy.

• Comprehensive medical, vision, and dental insurance.

• Flexible paid time off (PTO) policy.

• Ten paid holidays throughout the year.

• Parental leave support.

• Professional development funding.

• Opportunities for community engagement.