Job descriptionCredo is seeking a hands-on Security Engineer to join the Security Engineering team. This role will help protect the company's systems, infrastructure, cloud environments, applications, endpoints, and data.
The Security Engineer will investigate security alerts and incidents, manage security technologies, assess vulnerabilities, improve security controls, support third-party security reviews, and partner with infrastructure, cloud, network, application, and business teams to reduce cybersecurity risk.
The successful candidate will be capable of independently investigating technical security issues, driving remediation activities, improving security processes, and clearly communicating findings and risks to stakeholders.
Base salary range is $90,000 - $110,000 a year. The base salary offer will depend on factors such as education, experience, training, skills, qualifications, and location. This position is also eligible for a discretionary bonus, equity and a full range of medical and other benefits.
QualificationsBasic Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, IT, or a related field (or equivalent practical experience), plus at least three years in security engineering, security operations, incident response, or vulnerability management.
- Hands-on experience investigating security alerts and incidents, and analyzing logs from multiple technologies and data sources.
- Experience administering or supporting enterprise security tools, with working knowledge of vulnerability assessment, prioritization, remediation, and validation.
- Strong understanding of endpoint, network, identity, email, cloud, application, and data-security principles, including Windows and Linux/Unix, TCP/IP, DNS, VPNs, firewalls, and least privilege.
- Scripting or automation skills (Python, PowerShell, Bash), strong documentation and problem-solving abilities, and the ability to communicate risks to both technical and non-technical stakeholders.
Preferred Qualifications
- Experience with platforms such as Rapid7, Tenable, CrowdStrike or Microsoft De-fender, Palo Alto Networks Prisma/Strata, and Proofpoint.
- Familiarity with Microsoft 365 security, cloud-security tooling across AWS, Azure, or GCP, and DLP or data-security platforms.
- Exposure to PAM and password vaults, PKI, application control, micro-segmentation, and virtualization technologies.
- Experience with security orchestration, workflow automation, and ticketing or re-mediation tracking (e.g., Jira).
- Certifications such as Security+, CySA+, GCIH, GCIA, AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer, or CISSP/Associate of ISC2.
Job responsibilities- Monitor, investigate, and respond to security alerts and incidents across endpoint, identity, email, network, cloud, and application environments, leading or supporting containment, remediation, and recovery.
- Administer and tune enterprise security platforms (SIEM, EDR/XDR, firewall/SASE, email security, DLP), including detection rules, integrations, health checks, and automation.
- Perform vulnerability and exposure assessments, prioritize remediation by risk, coordinate fixes with IT and application owners, and validate completion.
- Support security monitoring and secure configuration across AWS, Azure, and Google Cloud, and conduct technical security reviews of vendors, SaaS applications, and new technologies.
- Document findings, runbooks, and evidence; support risk assessments and audits aligned with ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK; and contribute to security projects and continuous improvement.
