Senior Security & Compliance Engineer

Our client is a growing e-commerce and retail organization seeking a Senior Security Engineer to serve as the organization's senior U.S.

-based security resource. This is a highly visible role offering the opportunity to own security initiatives across cloud infrastructure, e-commerce platforms, networks, applications, endpoints, incident response, and compliance.

This position is ideal for a security professional who enjoys balancing hands‑on security engineering (60-70%) with risk management, incident response leadership, and security strategy (30-40%).

You'll work closely with technology leadership and distributed technical teams while helping mature the organization's overall security posture and long-term security roadmap.

• Design, implement, and maintain security controls across cloud, network, endpoint, identity, and application environments.
• Investigate security alerts, vulnerabilities, suspicious activity, and security incidents.
• Conduct vulnerability assessments and drive remediation efforts.
• Strengthen security monitoring, detection, and prevention capabilities.
• Evaluate and improve existing security controls and operational processes.
• Secure cloud environments supporting critical business applications and e-commerce operations.
• Implement best practices around identity management, access controls, logging, monitoring, and secure configurations.
• Partner with engineering teams to integrate security into infrastructure, applications, APIs, and deployment processes.
• Support environments utilizing GCP, AWS, Azure, or similar cloud platforms.

• Improve security monitoring and hardening of customer-facing web applications and e-commerce platforms.
• Monitor emerging threats impacting web applications, APIs, and online commerce environments.
• Support technologies such as web application firewalls, edge security solutions, bot mitigation, and traffic protection.
• Help protect customer data and critical business systems while balancing security and user experience.
• Lead the development and enhancement of incident response plans and procedures.
• Build and maintain runbooks, escalation paths, response workflows, and tabletop exercises.
• Coordinate investigations, containment, remediation, and post-incident reviews.
• Partner with infrastructure teams to improve disaster recovery and operational resilience programs.

• Conduct security risk assessments and prioritize remediation efforts based on business impact.
• Support PCI DSS compliance initiatives and related control management activities.
• Assist with third‑party security assessments, audits, penetration testing, and remediation tracking.
• Maintain security documentation, risk registers, and audit‑ready records.
• Monitor evolving security threats, vulnerabilities, and regulatory requirements.
• Serve as a trusted advisor to technology leadership and key stakeholders.
• Translate technical findings into practical business recommendations.
• Provide guidance and mentorship to distributed technical teams.
• Promote security awareness and secure practices throughout the organization.
• Contribute to the future development and maturity of the security function.

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent experience.
• Significant experience in cybersecurity, information security, cloud security, infrastructure security, or related disciplines.
• Recent hands‑on experience implementing, configuring, investigating, and remediating security controls.
• Experience securing public cloud environments such as GCP, AWS, or Azure.
• Strong knowledge of:
• Identity & Access Management
• Vulnerability…