Security Engineer

Join our fast-paced, growing company and further your career with Maverick Payments, where you can thrive, your ideas are valued, and your colleagues feel more like family than coworkers!

Maverick Payments is a family-owned and privately held full-service payment provider. Located in Calabasas, California, Maverick has created innovative technology designed for sales organizations, such as ISO’s and ISV’s, looking to monetize payments by reselling our white-labeled payments stack. Our payment products include merchant acquiring services, a proprietary gateway, ACH processing, fraud & chargeback tools, analytics, and other value-add services. Maverick’s team includes underwriting, risk management, compliance & legal, technology & product development, on-boarding, customer support, information technology, and more.

As a Security Engineer you will be responsible for designing, implementing, maintaining, and enhancing the Company's information security controls across cloud, infrastructure, endpoint, identity, and security operations environments. Reporting to the AVP, Information Security, this role serves as a technical resource for cybersecurity initiatives and works closely with Information Technology, Compliance, Infrastructure, Dev Ops, and business stakeholders to strengthen Maverick's security posture.

• The Security Engineer supports the Company's PCI DSS and SOC 2 Type II compliance efforts through proactive security monitoring, vulnerability management, incident response, threat detection, and secure cloud architecture practices. This position also partners with internal teams to evaluate and implement emerging security technologies, including AI-enabled solutions, while ensuring alignment with industry best practices and regulatory requirements.
• Design, implement, and maintain security controls across Azure cloud environments and hosted infrastructure.
• Configure and manage Microsoft Defender for Cloud, Defender XDR, Sentinel, and related security tools.
• Develop and maintain security baselines, hardening standards, and configuration management processes.
• Monitor cloud security posture and recommend corrective actions to reduce organizational risk.
• Perform security reviews of systems, applications, and infrastructure architectures.
• Collaborate with infrastructure and development teams to ensure security requirements are incorporated into technology solutions.
• Support the implementation and maintenance of Zero Trust security principles and architecture.
• Manage security controls within Microsoft Entra  connected SaaS environments.
• Configure and enforce multi-factor authentication, conditional access, privileged access management, and least-privilege controls.
• Participate in user access reviews and identity governance activities.
• Assist with the development and enforcement of access management standards and procedures.
• Perform vulnerability assessments and coordinate remediation efforts across systems, endpoints, cloud environments, and applications.
• Monitor security alerts and assist with threat detection, investigation, and response activities.
• Develop and maintain SIEM, EDR, and security monitoring use cases.
• Coordinate penetration testing activities and track remediation of identified findings.
• Research emerging threats and integrate threat intelligence into security monitoring efforts.
• Develop scripts and automation workflows to improve operational efficiency and reduce manual effort.
• Assist in implementing technical controls for AI-enabled platforms and applications.
• Participate in security assessments and threat modeling activities for AI solutions.
• Monitor emerging AI security risks and recommend mitigation strategies.
• Partner…