Senior Security Engineer

New York, NY
Remote

$150,000–$170,000 Per Year
Instant Apply

7 days ago

Job Description

Senior Security Engineer
Full-Time Position
Fully Remote
Base Salary: $150k-$170k/yr

The Senior Security Engineer is a newly established senior individual contributor role that will drive the design, implementation, and continuous advancement of the security engineering program.
Reporting to the Director of IT, you will operate as a true partner to IT leadership, trusted to shape security decisions with a depth of expertise that elevates the whole organization. This is not an analyst or application security role; you will be expected to build and improve our security systems, ideal for someone energized by owning a domain end to end and continuously raising the bar.
This role you will be serving as a senior security presence and point of escalation across the function.
Must be:

Composed under fire: When a security event lands, you move toward it, not away. You stay methodical and let the evidence drive your decisions, instead of panicking or jumping to conclusions.
Relentlessly current: You live at the leading edge of the security field, tracking emerging threats, techniques, and tooling, and you treat staying ahead of the threat landscape as a core part of the job rather than an afterthought.
Evidence-driven and precise: You distinguish what is observed from what is assessed, and you hold that line even when stakeholders are pushing for a certainty you cannot yet responsibly give.
Deeply autonomous: You own investigations end to end, escalating genuine judgment calls rather than routine unknowns, and you operate with high autonomy on security architecture and incident decisions.
A detailed planner who executes: You translate ambiguous problems into granular, sequenced plans of action, then deliver against them. Your plans are specific enough that others can trust and follow them.
A builder at heart: You are energized by owning solutions, testing new ideas, and driving improvements quickly rather than settling for the status quo.
An audience-aware communicator: You write clearly for executive, technical, and non-technical readers, and you exhibit good judgement and discretion during sensitive incidents where accuracy, confidentiality, and timing matter

You Will Be

Owning the Security Tooling Portfolio: Evaluating, integrating, and rationalizing the security tool stack so investments are coherent, well-integrated, and earning their value
Owning Identity and Access Architecture: Designing identity, access, and session governance across Google Workspace and additional identity providers, including least-privilege design, credential and secrets hygiene, service-identity architecture, and joiner, mover, and leaver controls at the design layer.
Governing Cloud Security Posture: Defining security requirements for the GCP environment and translating them into policy and controls across Cloud IAM, organization policy, service account governance, and audit logging. Partnering with platform engineering on implementation, governing posture against those requirements, and feeding cloud telemetry into the detection pipeline.
Advancing Authentication and Secrets: Driving our phishing-resistant MFA strategy such as passkeys and hardware keys, strengthening secrets-management architecture, and advancing SAML SSO, SCIM provisioning, and session policy across the SaaS environment.
Governing OAuth and Token Lifecycle: Owning OAuth app vetting and governance, token lifecycle and revocation, and third-party application risk management.
Owning Incident Response: Owning incident response and forensic practice, running investigations independently, and coordinating external partners during major escalations.
Applying Security Automation and DaC: Treating detection, policy, configuration, and response automation as code that is version-controlled, peer-reviewed, and tested. Partnering with platform engineering on Terraform and cloud guardrails where security controls intersect with infrastructure.
Developing Internal Capability: Mentoring and developing team members on security practice over time, and partnering with the Director of IT to inform security decisions across the organization.

You Must Have

5+ years of hands-on security engineering experience in a professional environment, with a track record of owning security architecture and projects end to end
Detection engineering experience, including selecting, building, and operating a SIEM, writing and tuning detections, and owning log pipelines, alerting, and monitoring
4+ years of hands-on security cloud engineering, GCP strongly preferred, including Cloud IAM, organization policy, service account governance, and audit logging
Deep identity and access management expertise, including federation (SAML SSO) and SCIM provisioning and deprovisioning
SaaS identity security depth, including phishing-resistant MFA (passkeys, hardware keys), secrets-management architecture, and OAuth app governance, token lifecycle, and third-party application risk
Hands-on incident response and forensic methodology, including sound evidence handling
Endpoint security posture experience, including EDR operations (CrowdStrike Falcon or equivalent) and device-trust or conditional-access design
Experience operating vulnerability management or exposure management programs, including prioritization by exploitability, asset criticality, and business risk
Security automation and infrastructure-as-code fluency, including detection-as-code and a tool such as Terraform, at a level beyond ad hoc scripting

Nice to Have

A background in infrastructure, cloud platform, DevOps, SRE, or systems engineering before moving into security, bringing an automation-first foundation to detection and governance work
Experience scaling or maturing a security program in a fast-growing environment
Industry certifications (GCP Professional Cloud Security Engineer, GIAC such as GCIH, GCDA, or GDAT, CISSP, OSCP)
Experience managing least-privilege access across many vendor systems, including those that do not support SSO
Player-coach or mentoring experience: while this role is scoped as a senior individual contributor, candidates who can develop internal talent will be considered for expanded scope
Exposure to SOC 2 or similar compliance frameworks, partnering with GRC on audit readiness
Scripting and automation experience (Python, Bash) for security tooling and workflow optimization

Numbers & Facts

Location	New York, NY ( Remote)
Salary	$150,000–$170,000 Per Year

Skills

Applications Securityunmatched
Architectural Designunmatched
Authenticationunmatched
Automationunmatched
Bash Scriptingunmatched
CISSP - Certified Information Systems Security Professionalunmatched
Cloud Computingunmatched
Computer Securityunmatched
DevOpsunmatched
Endpoint Securityunmatched
Engineeringunmatched
Establish Prioritiesunmatched
GCIH - GIAC Certified Incident Handlerunmatched
GCP (Good Clinical Practices)unmatched
GIAC - Global Information Assurance Certificationunmatched
Identity Data Managementunmatched
Incident Responseunmatched
Machine Toolunmatched
Mentoringunmatched
OAuthunmatched
Phishingunmatched
Portfolio Analysisunmatched
Process Improvementunmatched
Python Programming/Scripting Languageunmatched
Requirements Managementunmatched
Riskunmatched
Risk Managementunmatched
Scripting (Scripting Languages)unmatched
Security Analysisunmatched
Security Architectureunmatched
Security Assertion Markup Language (SAML)unmatched
Security Information and Event Management (SIEM)unmatched
Security Infrastructureunmatched
Security Monitoringunmatched
Single Sign-On (SSO)unmatched
Software Engineeringunmatched
Software as a Service (SaaS)unmatched
Systems Engineeringunmatched
Technical Leadershipunmatched
Telemetryunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder