Senior Security Engineer

Role overview A long-standing technology provider to the beverage industry is hiring a Senior Security Engineer to serve as the technical lead of a small, high-leverage security team. The mandate is to take a well-tooled environment and turn its protections into consistently enforced, extended, and verified controls across headquarters, a private cloud, and several newly acquired business units. The role also leads incident response alongside external DFIR partners and helps build the program from a strong foundation up.

Responsibilities - Redesign internal network zones, eliminate permissive any-to-any paths, and stand up east-west traffic visibility as part of a firewall migration to Palo Alto. - Own the SIEM and SOC relationship, tuning and extending detection coverage from core environments to cloud workloads and acquired subsidiaries. - Unify vulnerability management across Windows, Mac, Linux, and cloud into a single find-fix-verify loop with risk-based prioritization. - Partner with IT on identity and access hardening, including Okta expansion, privileged access rollout, and tightening of remote and vendor access. - Serve as internal technical lead during security events, coordinating evidence handling and containment with DFIR partners and running tabletop exercises. - Mentor a junior analyst and set the technical bar for the team.

Requirements - 7+ years of hands-on security engineering across network, endpoint, and identity domains. - Deep practical experience with enterprise firewalls and segmentation design, Palo Alto strongly preferred, plus SIEM operations and EDR platforms. - Demonstrated incident response experience, including containment of real events and coordination with forensic partners. - The judgment to operate in a lean team: prioritize by risk, automate what repeats, and communicate clearly with executives. - Security certifications such as CISSP, GIAC (GCIA/GCIH/GDSA), or PCNSE are valued, with experience weighted over credentials.

Nice to have - Experience integrating acquired companies or operating across multi-entity environments. - Exposure to iSeries/AS400 or other long-lived enterprise platforms. - Scripting and automation skills in Python or PowerShell for security operations.

Benefits and work setup - Remote position with an annual compensation range of $160,000 to $190,000. - The program is executive-sponsored, funded, and built out across a growing family of companies.