Security Engineer IV

Primary Purpose

The Security Engineer IV serves as a technical leader in the design, implementation, and optimization of secure solutions across the organization. This role is responsible for leading complex security projects, providing advanced incident response, and collaborating with cross‑functional teams to ensure the integrity, confidentiality, and availability of systems and data.

The Security Engineer IV proactively identifies and mitigates risks, develops and deploys advanced security technologies, and mentors junior staff. This position drives continuous improvement and aligns solutions with organizational strategy and regulatory requirements, playing a critical role in strengthening the organization’s overall security posture.

We’re also seeking an AI Engineer to own deployment and management of our AI governance and security tooling, including Credo AI for model governance and risk assessment and Palo Alto Prisma AIRS or similar for runtime AI security and threat detection.

• Implement, monitor, and support hardware, software, applications, managed solutions, and service provider relationships.
• Contribute to information security projects that evaluate existing infrastructure and propose strategic changes.
• Deliver projects on time, within budget, and in accordance with service level agreements (SLAs).
• Provide incident response and system stability support, including after‑hours involvement as needed.
• Collaborate with architects, SOC, incident responders, infrastructure, and development teams to resolve security issues.
• Respond to and resolve service and escalation tickets, ensuring SLA compliance.
• Develop security test plans from architectural design, identify deficiencies, and implement enhancements to minimize production impact.
• Participate in change management and project meetings, providing expert guidance.
• Research, validate, and deploy advanced security solutions to meet business and regulatory needs.
• Apply security engineering fundamentals and processes as outlined in NIST 800‑160 and other relevant frameworks.
• Drive incident response and post‑mortem exercises, establishing measurable benchmarks and continuous improvement.
• Conduct performance testing and stress analysis of security solutions, ensuring business innovation is not hindered.
• Develop and implement technical solutions and new security tools to mitigate vulnerabilities and automate repeatable tasks.
• Lead troubleshooting efforts for compatibility issues between security tools and business applications.
• Analyze client and customer needs, providing clear and concise reports to leadership.
• Work closely with management and project managers to ensure successful project delivery and stakeholder communication.
• Provide feedback and recommendations to improve IT security processes and procedures.

• Perform other duties as assigned.
• Travel as required.

• Bachelor’s degree in management information systems, computer science, or another related field.
• Master’s degree in business administration or an IT‑related field.
• Licenses as needed.

• Five (5) years of experience in cybersecurity, with a strong background in system or network security engineering.
• Three (3) years of experience in a technical lead or senior engineering role.
• Proven expertise in technology design, implementation, and delivery (preferred 4+ years’ IT experience in addition to cybersecurity).
• Extensive knowledge of security controls and technologies, including SIEM, IDS/IPS, PKI, IDAM, antivirus, firewalls, EDR, threat intelligence platforms, security automation and orchestration, deception technologies, and application controls.
• Experience managing SIEM systems, threat intelligence platforms, security automation and orchestration solutions, IDS/IPS, FIM, DLP, and other monitoring tools.
• Experience with Application Control Listing Software, SIEM Solutions, XDR Solutions, and AI/ML technologies.
• Experience researching and advising leadership on emerging security technologies.
• Compliance with standards such as ISO 27001, NIST, PCI DSS, HIPAA, HITECH, SOX, GDPR, CIS, or SOC
  2.…