Job Title:Senior Security Engineer
Requisition ID:R028205
Job Description:As a Senior Security Engineer, you may find yourself...- Designing and operating security controls across systems, including secure configurations, identity controls, network segmentation, and logging
- Building maintainable Python services, API integrations, and automation that reduce manual work, with testing, error handling, monitoring, and secure credential management
- Developing AI/LLM-assisted security workflows, evaluating their accuracy and usefulness, and implementing data protection, least-privilege access, and human approval for sensitive actions
- Using Terraform or equivalent infrastructure-as-code tools and CI/CD pipelines to deploy repeatable, reviewable security infrastructure and detect configuration drift
- Engineering and integrating traditional security tools such as firewalls, VPNs, web application firewalls, endpoint protection, vulnerability scanners, and SIEM platforms
- Performing threat modeling and security design reviews, identifying control gaps, and partnering with service owners to prioritize and implement remediation
- Writing and maintaining architecture documentation, design decisions, runbooks, standard operating procedures, and operational handoff materials
- Participating in engineering projects from requirements through production, making risk-informed tradeoffs, as well as reviewing code and designs
- Troubleshooting security services using logs, metrics, and network analysis; improving reliability and supporting through an on-call rotation
- Turning incidents and operational feedback into durable improvements through blameless postmortems, automated checks, and measurement of risk reduction and time saved
You may succeed in this role if you...- Have hands-on experience securing and operating Azure and GCP environments, including cloud identity, networking, logging, and workload security
- Write quality Python and can demonstrate automation or integrations you have built, tested, deployed, and supported
- Have practical experience integrating AI/LLMs into tools or workflows beyond conversational use, and understand their limitations, evaluation needs, and security risks
- Use infrastructure as code, version control, code review, and CI/CD to make changes reproducible, testable, and safe to roll back
- Apply security fundamentals including least privilege, defense in depth, secure configuration, vulnerability management, encryption, and secrets management
- Communicate clearly in writing and conversation, translating technical findings into actionable guidance and documentation others can use without your help
- Can turn ambiguous problems into scoped engineering work, own delivery and operational outcomes, and collaborate across security, IT, cloud, and development teams
- Help peers grow through constructive feedback, automate repeated work, and choose practical, supportable solutions rather than adding unnecessary complexity
Types of projects you may work on...- Automating firewall rule reviews, security tool configuration, vulnerability enrichment, and remediation workflows using Python and APIs
- Developing AI/LLM-assisted alert enrichment, investigation summaries, or documentation retrieval with evaluation, auditability, and appropriate human oversight
- Creating reusable infrastructure-as-code modules and deployment pipelines with security validation, drift detection, and rollback procedures
- Improving security telemetry, service health monitoring, and the runbooks needed to operate these capabilities reliably
Areas of Expertise for a Senior Security Engineer- 8+ years of security engineering experience
- Cloud: Azure and GCP familiarity
- Programming and automation: Python, REST APIs, SDKs, automated testing, dependency management, and maintainable service integrations
- AI/LLMs: model APIs, retrieval-augmented generation, evaluation, output validation, and bounded tool permissions
- Network security: TCP/IP, DNS, TLS, routing, segmentation, firewalls, VPNs, web application firewalls, and intrusion detection/prevention
- Infrastructure as code and delivery: Terraform or equivalent, configuration management, Git, CI/CD, policy as code, and change control
- Security engineering fundamentals: threat modeling, secure design, vulnerability assessment, remediation prioritization, and system hardening
- Systems engineering: Linux, Mac, and Windows administration, troubleshooting, patching, availability, and operational recovery
- Technical communication: architecture diagrams, design records, runbooks, procedures, knowledge transfer, and guidance for technical and nontechnical audiences
RewardsWe provide a suite of benefits that promote physical, emotional and financial well-being for 'Every World' - we've got our employees covered! Subject to eligibility requirements, the Company offers comprehensive benefits including:
- Medical, dental, vision, health savings account or health reimbursement account, healthcare spending accounts, dependent care spending accounts, life and AD&D insurance, disability insurance;
- 401(k) with Company match, tuition reimbursement, charitable donation matching;
- Paid holidays and vacation, paid sick time, floating holidays, compassion and bereavement leaves, parental leave;
- Mental health & wellbeing programs, fitness programs, free and discounted games, and a variety of other voluntary benefit programs like supplemental life & disability, legal service, ID protection, rental insurance, and others;
- If the Company requires that you move geographic locations for the job, then you may also be eligible for relocation assistance.
Eligibility to participate in these benefits may vary for part time and temporary full-time employees and interns with the Company. You can learn more by visiting https://www.benefitsforeveryworld.com/.
In the U.S., the standard base pay range for this role is $102,800.00 - $190,204.00 Annual. These values reflect the expected base pay range of new hires across all U.S. locations. Ultimately, your specific range and offer will be based on several factors, including relevant experience, performance, and work location. Your Talent Professional can share this role's range details for your local geography during the hiring process. In addition to a competitive base pay, employees in this role may be eligible for incentive compensation. Incentive compensation is not guaranteed. While we strive to provide competitive offers to successful candidates, new hire compensation is negotiable.
