Security Engineer III

Description

The Security Engineer III provides advanced technical expertise in the design, implementation, and operation of enterprise security capabilities across endpoint, cloud, network, application, identity, and data environments. The role is responsible for strengthening preventative and detective controls through security engineering, detection engineering, vulnerability management, and incident response. This position also evaluates emerging technologies and threats to continuously improve the organization’s security posture.

• Engineer, implement, maintain, and continuously improve enterprise security controls across endpoint, cloud, network, application, identity, web, API, and data security environments.
• Serve as a technical subject matter expert for assigned security capabilities, providing guidance on secure architecture, configuration, integration, and operational best practices.
• Identify, assess, and drive remediation of vulnerabilities, security exposures, and control gaps identified through security assessments, penetration testing, monitoring, audits, and vulnerability management programs.
• Design and implement security controls for cloud infrastructure, workloads, applications, and services, including identity, network security, workload protection, vulnerability management, and secure configuration.
• Partner with application and engineering teams to integrate security throughout the software development lifecycle, including application and API security testing, secure design, vulnerability remediation, and Dev Sec Ops  practices.
• Engineer and maintain network, web applications, and secure access controls, including segmentation, traffic inspection, threat prevention, secure web access, and protection of Internet-facing applications and services.
• Evaluate and improve identity and access security, including authentication, authorization, privileged access, service identities, least privilege, and Zero Trust principles.
• Develop and improve security monitoring and detection capabilities, including SIEM use cases, detection logic, telemetry requirements, alert tuning, threat hunting, and identification of suspicious or malicious activity.
• Provide technical expertise during security incidents, including investigation, containment, root-cause analysis, remediation, and identification of opportunities to improve preventative and detective security controls.
• Research emerging threats and technologies, including artificial intelligence and generative AI security risks; develop security architecture, standards, and documentation; and identify opportunities to improve security through automation, APIs, scripting, and orchestration.

• 5+ years of relevant experience in information security, security engineering, infrastructure security, or related technology disciplines, with demonstrated experience implementing and supporting enterprise security controls.
• Strong experience with endpoint security and threat protection, including endpoint detection and response, attack prevention, security monitoring, threat investigation, and vulnerability management.
• Strong understanding of cloud security architecture and engineering, including workload security, identity, networking, configuration and posture management, vulnerability management, and cloud-native environments.
• Experience with application and API security, including secure software development practices, application security testing, API authentication and authorization, vulnerability identification, and integration of security into development pipelines.
• Strong knowledge of network, web application, and secure access security, including firewalls, segmentation, web…