Senior Security Engineer

Required qualifications

• 8 to 10 years of progressive experience in cybersecurity, security operations, or security engineering within complex enterprise environments.
• Strong hands-on experience with EDR tools and processes, including CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or comparable platforms.
• Strong knowledge of vulnerability management tools and processes, including Qualys, Tenable, Rapid7, or comparable platforms.
• Experience driving organization-wide security compliance or security posture improvement initiatives to completion.
• Ability to assess controls, identify gaps and root causes, evaluate risk, and recommend practical improvements.
• Working knowledge of NIST CSF, CIS Controls, ISO 27001, or similar security frameworks.
• Strong knowledge of Windows and Linux endpoints, networking, Active Directory, identity security, and cloud security concepts.
• Experience with SIEM analysis, threat investigation, and active incident response.
• Bachelor's degree in a related discipline or equivalent relevant experience.

Preferred skills and certifications

• CISSP certification is preferred.
• CISM, GIAC, CCSP, or another relevant security certification is advantageous.
• Experience conducting security maturity assessments and presenting improvement roadmaps is advantageous.
• Working knowledge of PowerShell, Python, APIs, or security workflow automation is advantageous.
• Experience supporting security audits, compliance reviews, and evidence collection is advantageous.
• Experience leading cross-functional remediation and mentoring security engineers is advantageous.

Customer expectations