SR Security Engineer

Summary of the Role

We are looking for a Senior Security Engineer to own the end-to-end design, implementation, and hardening of our enterprise cloud and systems infrastructure. Sitting within the Technology team, you will establish preventive controls, design structural security improvements, and lead patch management programs across multi-account AWS environments and Microsoft enterprise ecosystems. You will integrate security into CI/CD pipelines, lead threat modeling efforts, and set the security standard across Engineering, DevOps, and IT to ensure proactive defense and risk mitigation.

Desired Skills

• Upper Intermediate English proficiency (strong verbal and written communication).
• 5+ years of hands-on security engineering experience in vulnerability management and security operations.
• Hands-on Microsoft Hardening: Deep expertise securing Microsoft environments, including Defender for Endpoint, Defender for Office 365, Intune, Entra ID Conditional Access, and hybrid Active Directory.
• AWS Cloud Security & IaC: Strong experience securing multi-account AWS environments and cloud-native services using Infrastructure as Code (IaC) to implement preventive security controls.
• Enterprise Patch Governance: Proven ownership of enterprise-wide patch management programs, including emergency patching strategies and exception governance.
• DevSecOps & Secure SDLC: Hands-on experience integrating security testing (SAST/AppSec) into CI/CD pipelines, conducting threat modeling, and implementing cloud/network security controls.
• Program & Technical Leadership: Demonstrated ownership of preventive security initiatives with the ability to mentor engineers, influence cross-functional teams, and translate complex risk/compliance requirements into practical engineering controls.

Responsibilities

• Infrastructure & Cloud Hardening: Design, deploy, and enforce preventive security controls across multi-account AWS infrastructure and Microsoft modern workplace ecosystems (Intune, Defender, Entra ID).
• Enterprise Patch & Vulnerability Management: Own and operate the end-to-end enterprise patch management program, overseeing regular updates, emergency patch deployments, and exception workflows.
• DevSecOps & Application Security: Integrate automated security testing (SAST) into CI/CD pipelines, partner with engineering teams on secure SDLC practices, and conduct threat modeling.
• Security Architecture & Standards: Set structural security benchmarks, author clear security documentation, and drive proactive controls that mitigate risk before incident creation.
• Mentorship & Cross-Functional Collaboration: Mentor junior security engineers and influence Engineering, DevOps, and IT teams to embed security best practices into daily workflows.

Nice-to-Haves

• Industry & Audit Experience: Background in Financial Services or FinTech (or other highly regulated industries), with exposure to SOC 2, PCI DSS, or ISO 27001 audit leadership.
• Vendor & Tooling Ownership: Experience selecting, onboarding, or managing MDR/MSSP vendors, as well as hands-on exposure to CSPM tools (e.g., Orca Security).
• Advanced Security Operations: Experience in detection engineering, threat hunting, or managed SOC oversight.
• Relevant Certifications: CISSP, CCSP, AWS Certified Security – Specialty, Microsoft SC-200 / SC-300, or GIAC certifications.

Who You Are

• Preventive & Proactive Security Mindset: You focus on prevention, architectural improvements, and building durable controls rather than strictly executing an operational alert triage queue.
• Strong Ownership & Technical Leader: You comfortably take full ownership of security programs end-to-end, set high technical standards, and enjoy mentoring other engineers to elevate the team.
• Architectural Thinker & Influencer: You possess strong risk-assessment judgment and excel at translating compliance or security needs into clear, practical engineering controls while influencing Engineering, DevOps, and IT partners.