Senior Security Engineer; Security Operations & GRC

Job Title: Senior Security Engineer (Security Operations & GRC)

Join a fast-growing technology company where security is a strategic business function, not just a support role. As a Senior Security Engineer, you'll own key areas across Security Operations, Governance, Risk & Compliance (GRC), and incident response while helping mature the organization's security posture. This is a highly visible opportunity to work cross-functionally, lead critical security initiatives, and directly influence how the company protects its systems, employees, and customers.

• Own day-to-day Security Operations, including threat detection, alert triage, threat hunting, and incident response.
• Lead security investigations from initial detection through containment, root cause analysis, customer communications, and post-incident reviews.
• Configure, tune, and maintain SIEM, SOAR, and Endpoint Detection & Response (EDR) platforms.
• Develop and maintain security detections, automation, and response playbooks.
• Implement and strengthen Zero Trust security initiatives across the organization.
• Manage endpoint security policies and device protection for corporate endpoints.
• Oversee vulnerability management, remediation tracking, and patch management programs.
• Build and maintain incident response runbooks, on-call procedures, and tabletop exercises.
• Lead SOC 1 and SOC 2 audit readiness, including evidence collection, control mapping, and audit coordination.
• Manage third-party risk assessments and vendor security reviews.
• Respond to customer security questionnaires and support compliance initiatives.
• Administer security awareness and phishing simulation programs.
• Manage relationships with security vendors and service providers.
• Maintain web gateway and proxy security policies, including website whitelisting and access controls.

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Extensive experience in Security Operations, Incident Response, or Security Engineering.
• Strong knowledge of SIEM, SOAR, and Endpoint Detection & Response technologies.
• Experience leading SOC 1 and/or SOC 2 compliance efforts and external audits.
• Hands‑on experience with vulnerability management and remediation programs.
• Experience implementing Zero Trust security principles.
• Strong understanding of endpoint security, identity security, and access management.
• Experience conducting third‑party vendor security assessments.
• Excellent communication skills with the ability to collaborate across technical and business teams.

• Experience with Crowd Strike or comparable EDR platforms.
• Experience with Netskope or similar secure web gateway/proxy solutions.
• Familiarity with detection engineering and detections-as-code methodologies.
• Experience managing MSSPs and other security vendors.
• Cloud security experience within AWS, Azure, or GCP environments.
• Relevant security certifications such as CISSP, GCIH, GCIA, Security+, or similar.

• High‑impact role with ownership across both Security Operations and GRC.
• Opportunity to shape and mature the organization's overall security strategy.
• Work alongside collaborative engineering and leadership teams.
• Exposure to a broad range of modern security technologies and initiatives.
• Visible role with direct influence on business‑critical security decisions.

• Salary Range: $170,000 - $200,000 per year
• Annual Bonus
• Equity participation
• Comprehensive benefits package
• Opportunity for career growth and technical ownership
• Hybrid work environment

Applicants must be currently authorized to work in the United States on a full‑time basis now and in the future. This position does not offer sponsorship.