Senior Security Engineer

## Overview The expected salary range for this position is $130,000 to $150,000 annually. This represents the employer’s good faith estimate of the compensation range at the time of posting. Final compensation will be based on factors such as experience, education, and qualifications. ## Description **Role Summary:** Reporting to the Chief Information Security Officer, the Senior Security Engineer is responsible for designing, implementing, and maintaining security technologies and processes that protect the organization's systems, applications, and data. This role partners closely with infrastructure, application development, and business teams to identify risks, improve security controls, support incident response activities, and strengthen the organization's overall cybersecurity posture. **Responsibilities:** 1. Lead the evaluation, implementation, and integration of new technologies and techniques to enhance the organization's cybersecurity posture. 2. Serve as a key liaison between security and technical teams to support secure development practices and resolve security issues. 3. Perform detailed application and infrastructure security testing to validate remediation efforts and identify potential vulnerabilities. 4. Collaborate with developers and technical stakeholders to communicate security findings and assist with implementation of corrective actions. 5. Maintain and update security process documentation, operational playbooks, and internal knowledge base articles to reflect current practices. 6. Assist with tracking, measuring, and reporting cybersecurity performance metrics and key performance indicators. 7. Manage the onboarding and integration of new applications into the organization’s identity and access management framework. 8. Support identity lifecycle management, including user provisioning, deprovisioning, and access reviews. 9. Act as the initial responder to security alerts and events, conducting triage and escalating as needed. 10. Analyze and tune detection systems to reduce false positives and improve threat detection capabilities. 11. Develop and execute threat hunting strategies based on observed adversary behaviors and threat intelligence. 12. Collaborate with internal and external teams during threat investigations and response activities. 13. Provide Tier 1 support for security-related tickets and requests, including escalation and documentation as needed. 14. Coordinate and submit changes through the organization's change management process. 15. Review and assess user-reported communications to identify phishing or other malicious activity. 16. Conduct security risk assessments and provide recommendations to reduce organizational risk. 17. Support third-party risk assessments and security reviews of vendors and service providers. 18. Monitor and improve security controls within cloud environments including AWS and Azure. 19. Assist with cloud security architecture reviews and implementation of security best practices for SaaS, IaaS, and PaaS platforms. 20. Participate in security architecture reviews and provide guidance on secure system design and implementation. **Qualifications:** **Education & Experience:** - 5+ years of progressive experience in information security, cybersecurity engineering, or related technical disciplines. - Bachelor's Degree required - Experience with information security in Cloud computing and SaaS/IaaS/PaaS models. - Extensive knowledge of information technology operations, responsibilities, procedures to ensure adherence by all staff and make incremental improvements as needed - Strong knowledge of application infrastructure components such as Windows Server, Active Directory, Group policy, SQL Server, IIS, AWS, Azure and Tomcat. - Demonstrated experience with Windows 11 and networking concepts. - Experience with DLP, anti-virus and anti-malware. - In-depth understanding of TCP /IP, computer networking, routing and switching. - Solid experience with firewall and…