Security Engineer

IT Audit Labs; Saint Paul (MN); On-site; USD 110,000 - 140,000; Full time

Job summary

IT Audit Labs is seeking a Security Engineer to strengthen security across internal systems and client environments. The role focuses on designing, implementing, and maintaining security controls to protect assets and support compliance initiatives, while advancing cybersecurity maturity.

The ideal candidate has experience in security architecture, risk management, and translating requirements into scalable solutions, with hands-on work across cloud providers, SaaS security, and incident

Qualifications

• Masterss degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related technical field.
• 1+ years of experience in security engineering, cybersecurity, or related technical roles.
• Experience securing SaaS platforms.
• Scripting or automation experience (Python, PowerShell, Bash, etc.).
• Strong understanding of network security, encryption, IAM, and secure architecture principles.
• Experience securing cloud environments (AWS, Azure, GCP, or similar).
• Familiarity with frameworks like SOC 2, NIST CSF, CIS Controls, or similar.
• Hands–on experience with security tools (SIEM, EDR, vulnerability scanners, IAM platforms).

Responsibilities

• Security Engineering & Architecture: Design, implement, and maintain secure infrastructure across cloud and on–prem environments.
• Develop and enforce security standards, baselines, and hardening procedures.
• Architect security solutions aligned with compliance frameworks.
• Conduct system security reviews and threat modeling exercises.
• Vulnerability & Risk Management: Lead vulnerability management lifecycle, scanning, prioritization, remediation tracking.
• Risk assessments and remediation planning; partner with engineering teams to resolve gaps.
• Security Monitoring & Incident Response: Implement and optimize SIEM, EDR, and monitoring tools; support incident detection and root cause analysis.
• Develop playbooks and automation for security operations.
• Cloud & Application Security: Secure cloud environments; review IaC and CI/CD pipelines for security best practices; conduct application security testing.

Skills

Security engineering

Threat modeling

Incident response

Cloud security

Scripting

IAM

Secure architecture

Education

Masterss degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related technical field

Tools

SIEM

EDR

Vulnerability scanners

IAM platforms

Job description

IT Audit Labs is seeking a highly skilled and motivated Security Engineer to strengthen our security posture across internal systems and client environments. This role is responsible for designing, implementing, and maintaining security controls that protect organizational assets, support compliance initiatives, and enhance our overall cybersecurity maturity. The ideal candidate brings advanced technical expertise, a strong understanding of security architecture and risk management principles, and the ability to translate security requirements into scalable technical solutions.

Key Responsibilities

• Security Engineering & Architecture Design, implement, and maintain secure infrastructure across cloud and on–prem environments
• Develop and enforce security standards, baselines, and hardening procedures
• Architect security solutions aligned with compliance frameworks (SOC 2, NIST, CIS, etc.)
• Conduct system security reviews and threat modeling exercises
• Vulnerability & Risk Management
• Lead vulnerability management lifecycle (scanning, prioritization, remediation tracking)
• Perform risk assessments and support remediation planning
• Partner with engineering teams to resolve identified security gaps
• Security Monitoring & Incident Response
• Implement and optimize SIEM, EDR, and monitoring tools
• Support incident detection, response, and root cause analysis
• Develop playbooks and automation for security operations
• Cloud & Application Security
• Secure cloud environments (AWS, Azure, GCP as applicable)
• Review infrastructure–as–code (IaC) and CI/CD pipelines for security best practices
• Conduct application security testing and code reviews where appropriate
• Compliance & Audit Support
• Support internal and external audit processes
• Maintain documentation for policies, procedures, and technical controls
• Collaborate with compliance and audit teams to ensure ongoing adherence to regulatory and industry standards

Qualifications

• Required Masterss degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related technical field
• 1+ years of experience in security engineering, cybersecurity, or related technical roles
• Experience securing SaaS platforms
• Scripting or automation experience (Python, PowerShell, Bash, etc.)
• Strong understanding of network security, encryption, identity and access management, and secure architecture principles
• Experience securing cloud environments (AWS, Azure, GCP, or similar)
• Familiarity with compliance frameworks such as SOC 2, NIST CSF, CIS Controls, or similar
• Hands–on experience with security tools (SIEM, EDR, vulnerability scanners, IAM platforms)
• Strong analytical, troubleshooting, and problem–solving skills

Preferred

• Relevant industry certifications (CISSP, CISM, CEH, Security+, GIAC, etc.)
• Experience supporting audit or compliance–driven environments