Senior Security Engineer

Recru; Houston (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Recru is seeking a Senior Security Engineer to protect enterprise applications, cloud, identities, endpoints, and networks. The role emphasizes application security, threat detection, incident response, vulnerability management, SIEM engineering, and security automation in a regulated environment.

You will drive security initiatives, investigate incidents, develop SIEM detections, and support PCI DSS compliance while partnering with cross‑functional teams to embed security throughout the

Qualifications

• 3-5+ years of cybersecurity, security engineering, AppSec, or SOC experience.
• Experience with application security, vulnerability management, and incident response.
• Hands‑on experience with SIEM, EDR, firewalls, and threat hunting.

Responsibilities

• Drive application security initiatives, vulnerability assessments, and remediation efforts.
• Investigate and respond to security incidents across cloud, identity, endpoint, and network environments.
• Develop and tune SIEM detections, threat-hunting activities, and automated response workflows.
• Manage vulnerability scanning, risk prioritization, and remediation tracking.
• Support Microsoft Entra ID, MFA, Conditional Access, and Zero Trust initiatives.
• Partner with development, infrastructure, and network teams to embed security throughout the environment.
• Support PCI DSS compliance and security governance initiatives.

Skills

Cybersecurity

AppSec

Incident response

Scripting

Tools

SIEM

EDR

Firewalls

Threat hunting

Job description

Senior Security Engineer responsible for protecting enterprise applications, cloud, identities, endpoints, and networks. Focuses on application security, threat detection, incident response, vulnerability management, SIEM engineering, and security automation in a regulated environment.

Key Responsibilities:

• Drive application security initiatives, vulnerability assessments, and remediation efforts

• Investigate and respond to security incidents across cloud, identity, endpoint, and network environments

• Develop and tune SIEM detections, threat-hunting activities, and automated response workflows

• Manage vulnerability scanning, risk prioritization, and remediation tracking

• Support Microsoft Entra ID, MFA, Conditional Access, and Zero Trust initiatives

• Partner with development, infrastructure, and network teams to embed security throughout the environment

• Support PCI DSS compliance and security governance initiatives

Qualifications:

• 3-5+ years of cybersecurity, security engineering, AppSec, or SOC experience

• Experience with application security, vulnerability management, and incident response

• Hands‑on experience with SIEM, EDR, firewalls, and threat hunting

• Knowledge of Microsoft Entra ID, MFA, Conditional Access, and cloud security

• Scripting experience with Python, PowerShell, or similar tools

• Familiarity with PCI DSS, Zero Trust, and modern security frameworks

Preferred Skills:

• Microsoft 365 Security experience

• Container security, DevSecOps, or cloud-native security experience

• Security certifications such as CISSP, GCIH, GPEN, CCSP, or Security+

• Experience in regulated enterprise environments

You have 3-5 years in AppSec and incident response. Proficient with SIEM, EDR, firewalls, and threat hunting. Experienced scripting in Python or PowerShell for automation