Senior Security Engineer

The Senior Security Engineer is the senior technical implementer on the AGS security team, responsible for executing and maintaining the enterprise security control set in support of the security program strategy, roadmap, and standards set by the Senior IT Security Manager. The role provides senior engineering capability across Identity & Access Management, security monitoring and detection, and threat and vulnerability management, translating program requirements into working technical controls and documented procedures.

This is a hands‑on senior individual contributor role that assists in leading technical delivery and provides guidance and mentorship to other security engineers and analysts, without direct people management responsibility. The role partners closely with Infrastructure, Network, Enterprise Apps, Compliance, and Business Units to implement security by design and enable the business.

• Execute against the enterprise security program roadmap, control priorities, and risk treatment decisions set by the Senior IT Security Manager.
• Assist in leading technical delivery of assigned security initiatives, including planning, sequencing, and hands‑on implementation.
• Implement and advance enterprise Identity & Access Management capability across hybrid on‑premises and cloud environments, including authentication, authorization, and Conditional Access configuration.
• Administer identity governance in partnership with Infrastructure: identity lifecycle (joiner/mover/leaver), MFA, self‑service password reset, just‑in‑time administrative access, app registrations, and service principals.
• Implement privileged access management capability, including privileged session controls and reduction of standing administrative rights.
• Apply role‑based access (RBAC/ABAC) and least privilege models across cloud and SaaS; expand SSO and federation coverage (SAML, OIDC) across enterprise and third‑party applications.
• Engineer, deploy, and expand the enterprise SIEM and log management platform, including log source onboarding, normalization, and retention configuration.
• Develop and tune detection content, correlation rules, and alerting logic aligned to recognized adversary behavior frameworks; reduce noise while improving catch rate.
• Build automated triage, enrichment, containment, and notification workflows for recurrent alert types.
• Assist in leading the vulnerability and patch management program: operate scanning coverage, apply the risk‑based prioritization model, and drive remediation to the service levels set by security leadership.
• Integrate threat intelligence into vulnerability prioritization and asset risk scoring.
• Coordinate remediation with IT operations and system owners; track SLA performance and report risk reduction.
• Develop and maintain technical playbooks and runbooks in support of the enterprise incident response plan; participate in tabletop exercises and post‑incident reviews.
• Support crown jewel and critical asset identification, and recommend technical treatment options for review and approval by the Senior IT Security Manager.
• Implement data classification and data protection controls, including labeling, encryption, and key management practices, in alignment with program standards.
• Maintain enterprise security asset visibility and security tooling coverage across the estate.
• Produce technical metrics and reporting in support of the KPIs and KRIs defined by security leadership (e.g., MFA coverage, privileged access reduction, endpoint agent coverage, MTTD/MTTR, patch SLA attainment, automation rate).
• Use scripting and automation to codify controls and eliminate manual work.
• Implement technical controls that align to the frameworks adopted by the security program (NIST CSF,…