Security Engineer

Hrimoveisararaquara; Alhambra (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

Hrimoveisararaquara in California seeks a security lead to oversee complex technology deployments, aligning product development with strong security controls and privacy protections. You will partner with engineering and operations to build a resilient security program and foster a culture of secure-by-design.

The role requires hands-on expertise across security architecture, risk management, and incident response, with senior-level experience and industry certifications.

Qualifications

• Minimum 10 years of security experience in designing and deploying vulnerability-mitigation solutions.
• At least 2 years with Microsoft Azure (IaaS/PaaS), Microsoft Sentinel, CrowdStrike, Tenable, Palo Alto Firewalls, Zscaler, and KQL.
• 1+ year developing AI-enabled solutions to support GRC and incident response processes.
• 3+ years managing security across multiple platforms, OS, and network environments.
• Experience with security audits, risk assessments, and application-level testing.

Responsibilities

• Lead security for complex technology implementations in a product-focused environment.
• Collaborate with development and operations to strengthen security practices.
• Design systems with strong security controls and privacy protections.
• Conduct security audits, risk assessments, and web app testing.
• Perform security code reviews to identify weaknesses.
• Develop technical solutions to mitigate vulnerabilities.
• Monitor threats and research new attack vectors.
• Support incident response and security operations processes.
• Assist with security compliance, risk management, and internal controls.

Skills

Security architecture

Network security

Threat intelligence

Security frameworks

Encryption

Networking protocols

Security tools

Operating systems

Databases

GRC / IR

Education

Bachelor’s degree in IT/Engineering

ITIL Foundation

CISSP

Tools

Microsoft Sentinel

Palo Alto

Zscaler

Tenable

CrowdStrike

KQL

Job description

Key Responsibilities

Serve as the security lead for complex technology implementations within a product-focused environment.

Collaborate with development and operations teams to strengthen security practices and promote a unified security culture.

Ensure systems are designed and developed with strong security controls while protecting user privacy.

Conduct security audits, risk assessments, and application-level vulnerability testing.

Perform security code reviews and identify potential security weaknesses.

Develop and implement technical solutions to mitigate security vulnerabilities.

Monitor emerging threats and perform research to identify new attack vectors.

Support incident response activities and contribute to security operations processes.

Assist with security compliance, risk management, and internal control assessments.

Required Skills:

Strong knowledge of security architecture, IT security, networking, or systems administration, with a focus on security.

Expertise in network security, vulnerability management, and threat intelligence analysis.

Familiarity with industry security frameworks such as NIST, CIS, ISO 27001, COBIT, and PCI DSS.

Strong understanding of encryption technologies and data protection methods.

Advanced knowledge of network protocols and concepts, including TCP/IP, LAN, WAN, DHCP, DNS, and routing protocols.

Experience with security tools and platforms, including SIEM systems (e.g., Microsoft Sentinel), intrusion prevention systems, firewalls, and related network security technologies.

Experience working with operating systems including Windows, Unix/Linux, and macOS.

Knowledge of database platforms such as SQL, Azure, and Oracle.

Hands-on experience using Model Context Protocol (MCP) to enable AI agents and large language models to interact with external tools, APIs, and enterprise data.

Experience Requirements

Minimum of 10 years of experience developing and implementing solutions to identify and mitigate security vulnerabilities.

At least 2 years of experience working with technologies such as Microsoft Azure (IaaS/PaaS), Microsoft Sentinel, CrowdStrike, Tenable, Palo Alto Firewalls, Zscaler, and KQL.

1+ year of experience developing AI-enabled solutions using modern large language model tools (e.g., Codex, Claude, or similar) to support GRC and incident response processes.

3+ years of experience in the following areas:

Managing security across multiple platforms, operating systems, and network environments within a large IT organization

Risk management, auditing, and security assessments

Security operations and internal control assessments

Compliance with security and privacy legal and regulatory requirements

Performing information security risk assessments and risk analysis

Education:

Bachelor’s degree in Information Technology, Engineering, or a related field.

Additional relevant experience may be substituted for education on a year-for-year basis.

ITIL Foundation Certification required.

CISSP (Certified Information Systems Security Professional) certification required.

Additional Information:

California residents only.

Position requires on-site work, and interviews will be conducted in person.