Security Engineer

Role overview Work across security engineering and operations to protect a company’s applications, cloud services, identities, and business systems. The role combines incident response and routine security operations with building new detection, automation, and threat-hunting capabilities, while partnering with engineering teams to make security part of everyday development.

Responsibilities - Assess application vulnerabilities through testing, and build automated SAST, DAST, dependency, and secret checks into CI/CD workflows. - Manage identity controls, privileged access, integrated applications, access reviews, and secure access requests. - Investigate and respond to security events, analyze logs, review phishing reports, and document incident timelines and evidence. - Develop monitoring, detection rules, automated response playbooks, and threat-hunting practices across cloud, identity, data, collaboration, and endpoint systems. - Support security reviews, remediation, risk tracking, vendor assessments, customer questionnaires, and audits against SOC 2, GDPR, and ISO 27001. - Coach developers, run security awareness activities, and use AI tools to assist investigations and automation while helping establish safe practices.

Requirements - At least three years in security engineering, security operations, or a similar role. - Practical incident response and log analysis experience, plus familiarity with a SIEM and detection-rule development. - Strong identity and access management skills, including an identity provider, SSO/SAML, and MFA. - Experience securing cloud and SaaS environments, such as AWS, GCP, or Google Workspace. - Scripting ability in Python or a comparable language, and confidence working with APIs. - Working knowledge of SOC 2 or ISO 27001, daily use of AI tools, fluent English, and the ability to advance security work across teams.

Nice to have - Experience with Vanta, Datadog, Snowflake, GitLab, or threat hunting.

Benefits and work setup - Broad work across identity, incident response, cloud security, compliance, and awareness, with an opportunity to design and put new security capabilities into production. - AI tools are used in day-to-day security work, with room to help shape their safe and effective use.