Senior Security Engineer

The Senior Security Engineer plays a critical role in safeguarding the company’s entire technology landscape; including networks, endpoints, cloud services, and applications – to ensure secure, reliable, and compliant service delivery. This individual serves as a technical authority not only in network security (firewalls, network segmentation, and traffic inspection) but also across a broad range of security domains. They will design and implement comprehensive security controls, lead incident response efforts, and drive continuous improvement in network security and automation.

The ideal candidate is adaptable, vendor-agnostic, and comfortable working with a variety of technologies and tools, aligning security practices with industry frameworks (e.g., NIST CSF, ISO 27001) and compliance requirements (e.g., SOC 1/2, CCPA).

• Network Security: Design, deploy, and manage network security controls (e.g. enterprise and internal firewalls, network segmentation, VPN gateways) to protect on-premises and cloud environments. Continue to optimize firewall rules and network policies for maximum security and performance, while maintaining an appropriate emphasis on network protection.
• Compliance & Documentation: Ensure security controls and processes align with industry standards and regulatory requirements (NIST CSF, ISO 27001, SOC 1/SOC 2, CCPA, etc.). Maintain up-to-date security documentation, including network/security architecture diagrams, incident response playbooks, standard operating procedures, and audit evidence. Support internal and external audits and drive remediation of any identified gaps.
• Collaboration & Leadership: Work closely with cross-functional teams (Network Engineering, IT Operations, SOC, Development, etc.) to educate and enforce security best practices across the organization. Mentor junior security engineers and promote a culture of security awareness and continuous improvement. Clearly communicate security risks, initiatives, and incident findings to both technical colleagues and executive leadership.
• Other Duties: Perform other security-related tasks and projects as assigned by leadership to meet the evolving security needs of the organization.

• Education & Experience: Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience). Approximately 7+ years of hands‑on experience in security engineering or related roles, with proven expertise across multiple security domains (network, endpoint, cloud, etc.).
• Technical
  
  Skills:
  
  Deep understanding of network security fundamentals (TCP/IP, routing, VPNs, firewall technologies) and experience managing next‑generation firewalls in complex environments. Competence in securing cloud environments and familiarity with cloud‑native security tools. Working knowledge of web application security concepts and testing methodologies
• Scripting & Automation: Proficiency in scripting or programming (e.g., Python, Power Shell, Bash) to automate tasks, integrate systems, or develop custom security tooling. Ability to analyze large datasets (logs, alerts) and build automation around security workflows is highly valued.
• Incident Response & Threat Management: Demonstrated experience in responding to security incidents and conducting root‑cause analysis and forensics. Familiarity with threat hunting techniques and use of threat intelligence to preemptively identify risks.
• Frameworks & Compliance: Strong knowledge of information security frameworks and standards (such as NIST Cybersecurity Framework, ISO/IEC 27001) and experience ensuring compliance with relevant regulations or standards (SOC 1/SOC 2, CCPA, etc.). Ability to translate these requirements into operational security controls and policies.
• Soft Skills: Excellent analytical and problem‑solving abilities, with a keen eye for detecting anomalies and solving complex security challenges. Strong communication skills to effectively convey security issues and solutions to technical and non-technical stakeholders. Proven ability to work independently and collaboratively in a fast‑paced environment, adapt to new technologies quickly, and manage multiple priorities.
• Certifications (Preferred): Relevant industry certifications are a plus, such as CISSP, vendor‑specific certifications (e.g., Palo Alto Networks PCNSE, Fortinet NSE6, etc.). These demonstrate a commitment to professional development and validated expertise across key areas of security.