Required Skills

Job Description

The Senior Security Engineer designs, implements, and maintains security solutions that protect the organization’s systems, applications, and data. This role combines hands-on engineering, technical problem-solving, automation, and incident response to strengthen security and reduce operational risk.
Working closely with Information Security, IT Operations, application development, and business stakeholders, the Senior Security Engineer leads technical initiatives from design and testing through deployment and ongoing support. The role requires sound judgment, strong troubleshooting skills, and the ability to translate security requirements into practical, reliable solutions.
Key Responsibilities
• Security Architecture & Design: Design, implement, and improve security controls across endpoints, servers, networks, cloud platforms, and applications. Evaluate existing capabilities, identify gaps, and develop solutions that address security requirements and business needs.
• Identity & Access Management: Implement and maintain authentication, access governance, and least-privilege controls, including single sign-on, multifactor authentication, Conditional Access, access reviews, and privileged identity management.
• Privileged Access Management: Engineer and support controls for privileged accounts and administrative access. Manage account onboarding, credential rotation, session controls, and integrations with enterprise systems to strengthen protection of privileged credentials.
• Endpoint & Data Protection: Deploy, configure, and tune endpoint security, device compliance, and information protection controls. Improve protection of sensitive information through data loss prevention, sensitivity labels, and appropriate access and sharing restrictions.
• PKI & Certificate Management: Support public key infrastructure and certificate lifecycle management, including certificate issuance, renewal, inventory, secure key handling, and troubleshooting. Improve processes and automation to reduce certificate-related outages and security exposure.
• Threat Detection & Incident Response: Improve security telemetry, detection logic, and integrations across SIEM, EDR/XDR, and related platforms. Investigate complex security incidents, support containment and recovery, and translate threat intelligence and investigation findings into stronger defenses.
• Vulnerability & Exposure Management: Assess vulnerabilities and configuration weaknesses, validate findings, and prioritize remediation based on exploitability, exposure, and business impact. Partner with system and application owners to implement corrective actions and verify remediation effectiveness.
• Automation & Scripting: Develop scripts, integrations, and automated workflows using PowerShell, Python, APIs, or similar technologies. Automate repeatable security tasks, improve response consistency, and strengthen reporting and operational efficiency.
• Security Reviews & Change Management: Conduct technical security reviews of new technologies, integrations, and infrastructure changes. Identify risks, recommend practical safeguards, and support testing, implementation planning, and change control.
• Risk & Compliance: Assess control effectiveness, maintain technical documentation, and provide evidence for audits and security assessments. Support alignment with organizational policies, applicable requirements, and frameworks such as NIST and ISO 27001, as well as SOC 2 assurance activities.
• Technical Leadership & Collaboration: Lead security engineering initiatives, mentor team members, and partner with IT and development teams to incorporate security into system design and daily operations. Maintain architecture diagrams, configuration standards, procedures, and operational runbooks.
Required Qualifications
• Experience: Five or more years of relevant experience in cybersecurity engineering, security infrastructure, or a related technical role, including hands-on implementation and support of enterprise security controls.
• Engineering Delivery: Demonstrated ability to design, deploy, integrate, troubleshoot, and improve security solutions. Experience managing technical work through requirements gathering, testing, implementation, and ongoing support.
• Identity & Endpoint Security: Strong practical experience with enterprise identity and endpoint security, including authentication, access controls, device management, and endpoint protection.
• Broader Security Knowledge: Practical experience in one or more additional areas, such as privileged access management, data protection, PKI, cloud security, network security, or detection engineering.
• Technical Foundations: Strong understanding of networking, TCP/IP, DNS, firewalls, Windows and Linux operating systems, authentication protocols, encryption, and certificates.
• Detection & Remediation: Experience investigating security events, evaluating vulnerabilities, and working with technical teams to implement and validate corrective actions.
• Automation: Ability to use PowerShell, Python, or a comparable scripting language to automate tasks and integrate security tools through APIs.
• Communication & Ownership: Must have excellent verbal and written communication skills. Ability to work independently, prioritize competing demands, document technical decisions, and explain security risks and recommendations to technical and business audiences.
Preferred Qualifications
• Microsoft Security: Experience with Microsoft Entra ID, including identity governance and Privileged Identity Management; Microsoft Defender XDR; Microsoft Intune; and Microsoft Purview, including Data Loss Prevention and Insider Risk Management.
• Privileged Access Platforms: Experience with CyberArk or a comparable enterprise PAM platform, including architecture, account onboarding, credential management, session management, integrations, and recovery planning.
• PKI & Certificate Services: Experience administering enterprise certificate services and improving certificate discovery, renewal, monitoring, and lifecycle automation.
• Cloud & Infrastructure Security: Experience securing one or more major cloud platforms, such as Azure. Familiarity with infrastructure as code, container security, or automated configuration management.
• Security Assessment: Experience conducting threat modeling, architecture reviews, security control testing, or technical support for audits and risk assessments.
• Certifications: Relevant certifications such as CISSP, Microsoft security certifications, CyberArk certifications, or comparable credentials.