Senior Security Engineer

Role overview This senior security engineering role owns security operations and initiatives spanning cloud infrastructure, employee endpoints, identity, and vulnerability remediation. The work includes implementing AWS controls, strengthening Windows and macOS environments, and using security monitoring and endpoint tools to identify and address risk.

Responsibilities - Manage security operations, vulnerability remediation programs, endpoint protection, and cloud security initiatives. - Implement and maintain AWS controls across IAM, Organizations and SCPs, Systems Manager, Lambda, and GuardDuty. - Harden Windows and macOS systems and manage endpoint security, identity controls, and vulnerability findings. - Monitor and improve security using endpoint, SIEM, DLP, and web-filtering tools. - Coordinate security controls across cloud and endpoint environments and drive remediation to completion.

Requirements - Hands-on AWS security experience, including IAM, Organizations/SCPs, Systems Manager, Lambda, and GuardDuty. - Experience with Terraform and infrastructure automation, plus Packer for building Windows AMIs. - Familiarity with FleetDM or osquery and CIS benchmark hardening for Windows and macOS. - Knowledge of Active Directory, Group Policy, RDP Gateway, LAPS, and Entra ID Conditional Access and PIM. - Experience with vulnerability tools such as CrowdStrike Spotlight, Nessus, and GitHub Security, and administration of CrowdStrike Falcon. - Experience with Datadog Cloud SIEM and Cloudflare DLP or web filtering.

Nice to have - Broad experience in cloud security, endpoint management, security operations, and vulnerability management, including security-hardening programs.

Benefits and work setup - Remote role open to candidates in Costa Rica, Peru, Colombia, or Bolivia.