Senior Security Engineer

Responsibilities: Secure and harden the full stack (applications, infrastructure, cloud) including WAF, network isolation, and machine-identity management Improve security workflows by reworking patch cycles and golden-image refreshes to cut cycle time Implement and tune controls across OS, containers, CI/CD pipelines, cloud configuration, and network boundaries Scale adoption of AI-augmented SAST and SCA tooling, review PRs, and prioritize fixes by risk Create reusable patterns, tooling, and runbooks; mentor junior engineers Partner with application and platform teams to land changes safely and coordinate across regions Provide accurate security metrics and status for program reporting

Key requirements: 5+ years in security, software, or DevSecOps engineering Multi-cloud experience (AWS, Azure, GCP, OCI) and on-premises infrastructure Solid understanding of security principles and vulnerabilities; hands-on in patching, hardening, cloud config, network isolation, and IAM Hands-on experience with SAST/SCA tooling and remediation of vulnerabilities; infrastructure patching Track record of improving engineering processes and reducing cycle times Familiarity with vulnerability prioritization (CVSS/EPSS, CISA KEV) and SLA-driven burndown; comfortable with AI-assisted tooling Clear communication; experience mentoring engineers; ownership of security outcomes clear communication mentoring ownership SAST/SCA tooling patching and hardening cloud configuration and guardrails