Senior Cybersecurity Engineer

Our team at Blackline Safety is growing! As a people-driven technology company, with a mission to make sure every worker returns home safely, we drive innovation, practice resiliency, demonstrate leadership, go the extra mile for our customers, and empower our people to be their best.

The Senior Cybersecurity Engineer will provide technical leadership across these environments while working alongside dedicated cybersecurity specialists, including Cybersecurity Operations, Application Security, and Governance, Risk & Compliance (GRC) resources.

Reporting to the Vice President, Business Information Technology & Cybersecurity, this position will serve as the senior technical cybersecurity resource within the team and will work across Blackline Safety's global technology environment.

The successful candidate will be highly technical, comfortable operating across multiple security domains, capable of influencing teams outside of their reporting structure, and interested in developing into broader cybersecurity leadership.

• Senior Cybersecurity Engineering
  • Design and implement controls, architecture patterns, technical standards, and configuration baselines across complex enterprise environments.
  • Lead complex investigations, security initiatives, proof-of-concepts, and technical implementations.
  • Identify systemic weaknesses, recommend practical solutions, and evaluate security technologies.
  • Troubleshoot issues spanning multiple systems and serve as an escalation point for cybersecurity and technology teams.
  • Translate cybersecurity strategy into executable initiatives and transition new capabilities into operations.
  • Automate security enrichment, investigation, remediation, reporting, validation, and guardrails.
  • Develop scripts and integrations using Power Shell, Python, Microsoft Graph, AWS and Git Hub APIs, REST APIs, and other appropriate tools.
  • Integrate preventative controls into technology deployment processes.
• Cloud Security
  • Review cloud architecture, IAM, privileged access, network exposure, encryption, secrets, certificates, and key management.
  • Assess logging, monitoring, CSPM/CNAPP, infrastructure-as-code, and automated deployment controls.
  • Identify misconfigurations and insecure patterns, support investigations, and work with Cloud Engineering and Software teams to implement preventative controls.
• Identity & Access Security
  • Conditional Access, identity protection, phishing-resistant authentication, and federation/SSO.
  • Privileged access, just-in-time administration, PIM, role-based access, and least privilege.
  • Service accounts, non-human identities, Active Directory hardening, and identity attack-path reduction.
• Infrastructure & Network Security
  • Firewall architecture, segmentation, NAC, SASE/ZTNA, secure remote access, and administrative controls.
  • Infrastructure monitoring and security configuration standards.
• Vulnerability & Exposure Management
  • Validate and prioritize vulnerabilities based on exploitability, exposure, asset criticality, threat intelligence, and compensating controls.
  • Identify attack paths and recurring weaknesses, develop remediation strategies with technical owners, and validate corrective action.
  • Analyze penetration-test findings and improve visibility of the enterprise attack surface.
  • Help the organization understand and reduce meaningful technical exposure.
• Cybersecurity Operations & Incident Response
  • Lead or support complex investigations, technical escalation, threat hunting, containment, remediation, and root-cause analysis.
  • Improve detection engineering, incident-response playbooks, tabletop exercises, and post-incident controls.
  • Provide technical leadership during significant cybersecurity incidents.
• Technical Leadership
  • Mentor cybersecurity team members and provide guidance without becoming a bottleneck.
  • Review technical designs, establish engineering standards, and help prioritize cybersecurity initiatives.
  • Lead cross-functional initiatives and represent Cybersecurity in architecture and project discussions.