Security Engineer

Goodwin Recruiting; Lawrenceville (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

Goodwin Recruiting seeks an experienced senior security engineer in the United States to partner with Engineering and deliver secure software across the SDLC.

You will strengthen cloud security, automate controls, and lead vulnerability management while aligning with business goals and regulatory requirements.

Qualifications

• Bachelor's degree or equivalent hands-on experience in CS/IT/Cybersecurity.
• 8+ years in security engineering, DevOps, or related field.
• Experience securing cloud environments (IAM, networking, containers, encryption, logging).
• Strong Kubernetes experience, GitOps, and automation scripting with Python or Bash.
• Experience with vulnerability assessments, audits, and SIEM.

Responsibilities

• Partner with engineering teams as security SME to embed security in planning and product decisions.
• Develop and maintain automated security controls across the SDLC.
• Strengthen cloud security operations, monitor vulnerabilities and misconfigurations.
• Evaluate systems against security policies and frameworks.
• Help develop cloud threat detection and incident response capabilities.
• Document security controls, decisions, configurations, and processes.
• Manage endpoint and device security controls with access policy enforcement.
• Work with stakeholders to identify risk and improve security posture without slowing development.
• Lead or participate in security audits and compliance evidence gathering.

Skills

Security engineering

DevOps

CI/CD

Python

Go

JavaScript

Rust

Kubernetes

GitOps

Vulnerability assessments

Penetration testing

SIEM

Communication

Education

Bachelor's degree / equivalent

Tools

Kubernetes

GitOps

SIEM

Penetration testing tools

Job description

What You'll Be Doing

• Partner closely with engineering teams as a security subject-matter expert, helping incorporate security considerations into planning, architecture, development, and product decisions.
• Develop and maintain automated security controls throughout the software delivery lifecycle, including application, dependency, secrets, and infrastructure security checks.
• Strengthen cloud security operations by monitoring environments for vulnerabilities, misconfigurations, and areas requiring remediation or hardening.
• Regularly evaluate systems, applications, and engineering practices against security policies, regulatory expectations, and established security frameworks.
• Help develop and operate cloud-based threat detection and response capabilities and participate in security incidents when needed.
• Establish clear documentation around security controls, technical decisions, configurations, and operational processes.
• Manage endpoint and device security controls while helping ensure appropriate access and policy enforcement across the organization.
• Work with engineering and business stakeholders to identify risk, determine practical solutions, and improve the organization’s overall security posture without unnecessarily slowing development.

What We're Looking For

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent hands-on experience.
• 8+ years of experience spanning security engineering, DevOps, software engineering, or a closely related field.
• Strong experience with modern CI/CD environments, infrastructure automation, and configuration management.
• Proficiency in at least two programming or scripting languages, ideally including Python, Go, JavaScript, or Rust.
• Significant hands-on experience securing cloud environments, including areas such as IAM, networking, containers, encryption, logging, monitoring, and access controls.
• Strong Kubernetes experience, particularly in environments using GitOps practices.
• Experience designing and implementing automated security controls, secrets management, infrastructure security testing, and policy enforcement.
• Experience with vulnerability assessments and/or application penetration testing.
• Strong Python or Bash scripting capabilities for automation and integrations.
• Experience supporting security audits and external compliance assessments, including preparation, remediation, and evidence gathering.
• Experience with Zero Trust networking and modern remote-access/security platforms.
• Hands-on experience with SIEM platforms and security monitoring.
• Excellent communication and stakeholder-management skills, with the ability to explain technical security risks in practical business terms.
• Someone who can operate with a high level of ownership, discretion, and sound judgment when working with sensitive systems and information.

JOB ID: 183057#post

Jennie Tay