Security Engineer

Description

We are seeking an experienced and proactive Security Engineer to join our internal security team. In this role, you will own and drive a broad range of security initiatives, from evaluating and implementing new tooling to maintaining compliance with industry frameworks. You will operate with significant autonomy, collaborating across teams and time zones to deliver measurable improvements to the organization's security posture. Exceptional communication skills and the ability to work effectively with US-based stakeholders are essential.

You will have: 

• Minimum of 6 years of experience in information security.
• Proven ability to independently own and deliver security projects end-to-end with minimal supervision.
• Experience evaluating, implementing, and administering security tools across multiple domains (email security, SIEM, endpoint, cloud, DLP, etc.).
• Hands-on experience with cloud security concepts and posture management across one or more major cloud platforms (AWS, Azure, or GCP).
• Solid understanding of data loss prevention (DLP) principles and technologies, including hands-on experience implementing or administering DLP solutions.
• Experience with SIEM platforms — configuration, tuning, and ongoing administration (e.g., Sumo Logic, Splunk, or similar).
• Experience with email security platforms such as Proofpoint, including administration, policy management, and threat response.
• Familiarity with third-party risk management (TPRM) processes, including vendor assessment and application onboarding workflows.
• Experience supporting security compliance programs such as ISO 27001 or SOC 2, including evidence collection, control management, and audit preparation.
• Experience developing, implementing, and enforcing security policies and standards.
• Strong understanding of identity and access management concepts, including experience with IAM platforms such as Okta.
• Ability to assess and prioritize competing security needs across a complex environment.
• Outstanding written and verbal communication skills, including the ability to present technical findings clearly to non-technical stakeholders.
• Comfortable working across time zones, with regular availability during US business hours for meetings and collaboration.

Good for you to have: 

• Experience with application whitelisting or allowlisting technologies and patch management platforms.
• Familiarity with governance of AI/LLM tools.
• Scripting or automation experience (Python, PowerShell, or Bash) to streamline security operations.
• Knowledge of security frameworks such as NIST CSF, CIS Controls, or MITRE ATT&CK.
• Experience with domain and DNS management in a security context (e.g., registrar transitions, SPF/DKIM/DMARC).
• Familiarity with cloud security posture management (CSPM) tooling (e.g., Wiz, Orca, or similar).
• Experience with endpoint protection platforms (e.g., CrowdStrike, or similar).
• Relevant certifications such as CISSP, CISM, CompTIA Security+, or equivalent.
• Background in IT operations or helpdesk environments is a plus.

Bird's eye view of your role: 

• Drive internal security projects from scoping through implementation and handoff.
• Evaluate new security technologies and make recommendations aligned to organizational risk and budget.
• Administer and optimize security tooling across the environment, ensuring tools are properly configured, monitored, and maintained.
• Support third-party risk management efforts, including the assessment and onboarding of new applications and vendors.
• Assist in maintaining and improving compliance with relevant security certifications and regulatory frameworks.
• Identify security gaps through ongoing review of cloud environments, applications, and internal processes.
• Collaborate with IT, engineering, legal, and other teams to implement security controls that are practical and effective.
• Create and maintain clear documentation including project plans, configurations, risk assessments, and runbooks.
• Contribute to security awareness efforts and internal communications on emerging threats and best practices.

What you will bring: This is an excellent opportunity for a seasoned security professional looking to make a broad and lasting impact. You will work across a dynamic environment with real ownership of your projects. We are committed to building a collaborative, security-first culture where your expertise is valued and your growth is supported.