Security Engineer (Fractional)

Role overview Provide fractional security engineering leadership to strengthen security practices across a distributed technology organization and its startup portfolio. The work spans security planning, hands-on control reviews, compliance support, team mentoring, incident readiness, and practical advice for early-stage ventures.

Responsibilities - Create a 12-month security roadmap and maintain a risk register that prioritizes remediation by business impact. - Review cloud configurations, code repositories, CI/CD pipelines, and security tooling; recommend practical control improvements. - Mentor IT and development leads, including running sessions on secure coding and DevSecOps. - Support data handling practices across applicable European, Philippine, and Australian privacy requirements, and standardize responses to client security assessments. - Draft and implement usable incident response, access control, and business continuity and disaster recovery policies. - Guide selection and rollout of endpoint detection, SIEM, and vulnerability management tools; advise portfolio startups and assess security and privacy risks in potential investments.

Requirements - Hands-on experience in security engineering, cloud or application security, or DevSecOps, preferably in technology or software services. - Strong understanding of secure software development, CI/CD security, AWS or GCP, identity and access management, vulnerability management, and endpoint security. - Ability to independently assess controls and turn findings into actionable recommendations. - Experience with client security reviews, questionnaires, audits, or vendor assessments.

Nice to have - Experience with governance, risk management, SOC 2, ISO 27001, GDPR, or related compliance frameworks. - Security certifications such as AWS or GCP credentials, CISSP, CISM, or CISA. - Background working with distributed teams or early-stage startups.