Senior Security Engineer

Kforce has a client in Scarsdale, NY that is seeking a highly technical Security Engineer with expertise across cloud, identity, network, application, and enterprise security. The ideal candidate can secure and troubleshoot complex environments, review code, manage XDR/SIEM detections, lead incident response, automate security workflows, and translate technical controls into audit-ready compliance evidence. This position is on-site 3-days a week near Scarsdale, NY. Responsibilities:

• Control Ownership: Design, deploy, and manage hands-on security controls across cloud, application, and network environments
• Infrastructure Hardening: Hardened enterprise cloud environments, identity systems, network security groups, firewalls, and remote distributed edge systems
• Security Operations: Monitor and tune the daily security stack (XDR, SIEM, and SOC workflows) by building custom detections and triaging alerts
• Incident Response: Lead incident response end-to-end, including triage, containment, eradication, and root cause analysis
• Network Segmentation: Maintain network architecture, including segmentation, firewall rules, VPNs, and Zero Trust access frameworks
• AppSec & Code Review: Evaluate application code and system designs for security gaps, partnering with engineering on remediation
• SecOps Automation: Automate repetitive security operations tasks through scripting to accelerate detection and response
• Identity Management: Administer IAM systems, manage access reviews, audit privileged accounts, and enforce MFA/SSO
• Compliance Maintenance: Maintain control evidence for regulatory frameworks, support auditor requests, and track remediation findings
• Vendor Management: Direct external security service providers, retaining accountability for final delivery and outcomes
• Policy & Training: Maintain internal security policies, support user awareness programs, and answer vendor security questionnaires

Requirements:

• Bachelor's degree in Computer Science, IT, or a related field, or equivalent practical experience
• Relevant industry certifications (e.g., AWS/Azure/GCP security, CISSP, GCIH, CySA+, or equivalent)
• 7+ years of experience in information security with a focus on hands-on engineering, preferably in a regulated sector
• 5+ years of experience securing hybrid cloud environments
• Deep engineering experience managing security controls across diverse modern technology stacks
• Expertise with enterprise cloud security architectures and centralized identity providers
• Understanding of firewall rules, network segmentation, VPNs, and Zero Trust Network Access
• Application security depth, including standard code reviews, OWASP top threats, and SAST/DAST tooling
• Experience building and tuning detections in XDR, SIEM, and SOC environments
• Proven incident response experience from initial triage through to root cause documentation
• Ability (e.g., Python, PowerShell, or specialized query languages) to automate daily operations
• Working compliance background with frameworks like SOC 2, NIST, or equivalent data privacy standards
• Experience securing endpoint devices, including data encryption at-rest and in-transit across distributed physical assets
• Familiarity with AI security, including securing corporate AI usage and evaluating AI-driven tools

Nice-to-Have:

• SecOps automation leveraging advanced analytics or automation orchestration platforms
• Experience with cloud firewalls and content delivery network (CDN) security
• Experience securing specialized distributed hardware, endpoint kiosks, or public-facing remote equipment
• Vendor risk management experience, including third-party risk tracking and due diligence
• Familiarity with GRC systems or automated compliance tracking platforms
• Exposure to agentic AI tooling or emerging AI governance programs
• Experience working within a regulated, data-sensitive industry