Hybrid Senior Security Engineer - Cloud, SaaS & AI

CoStar; Arlington (VA); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Health, dental, vision benefits

401(k)

Tuition reimbursement

Flexible hybrid schedule

Job summary

CoStar Group is seeking a Senior Security Engineer to advance security across network infrastructure, cloud services, SaaS platforms, and AI systems. This role emphasizes governance, risk management, and practical implementation across on‑premise and cloud environments.

The candidate will collaborate with cross‑functional teams to reduce risk, develop security patterns, and communicate complex concepts to technical and non‑technical stakeholders. Arlington/Richmond, hybrid work schedule.

Qualifications

• Bachelor’s Degree required from an accredited university.
• 5+ years of experience in Information Security or Security Engineering.
• Industry certifications (e.g., CISSP, SANS/GIAC, CCNA).
• Experience securing AWS networking (NACLs, Security Groups, ALB/NLB).
• Hands-on with NGFWs, WAFs, load balancers, and network segmentation.
• Strong scripting or automation skills (Python, PowerShell).
• Understanding of subnetting, routing, and network isolation.

Responsibilities

• Provide engineering security for enterprise network changes (on-prem and cloud).
• Audit designs and configurations to improve security posture.
• Evaluate firewall changes for on-prem and cloud environments.
• Design, enforce, and audit NGFW, load balancers, routers, switches, and wireless infra.
• Manage Secure Service Edge (SSE) platform.

Job description

CoStar Group is seeking a Senior Security Engineer to advance security across network infrastructure, cloud services, SaaS platforms, and AI systems. This role emphasizes governance, risk management, and practical implementation across on‑premise and cloud environments.

The candidate will collaborate with cross‑functional teams to reduce risk, develop security patterns, and communicate complex concepts to technical and non‑technical stakeholders. Arlington/Richmond, hybrid work schedule.