Security Engineer

Credo; San Jose (CA); Sur place; USD 90 000 - 110 000; Plein temps

Résumé du poste

Credo is seeking a hands-on Security Engineer to join the Security Engineering team in San Jose. You will protect systems, infrastructure, cloud, applications, endpoints, and data, investigate alerts and incidents, and drive remediation with stakeholders across IT and business units.

You will administer enterprise security tools, contribute to vulnerability management, and communicate risks clearly. This role offers a base salary of 90k–110k + discretionary bonus, equity, and comprehensive

Qualifications

• Bachelor’s degree in cybersecurity, computer science, IT or related field with 3+ years in security engineering, security operations, incident response or vulnerability management.
• Hands-on experience investigating security alerts and incidents, and analyzing logs from multiple technologies.
• Experience administering enterprise security tools with vulnerability assessment, prioritization, remediation, and validation.
• Strong understanding of endpoint, network, identity, cloud, data-security principles (Windows/Linux, TCP/IP, DNS, VPNs, firewalls, least privilege).
• Scripting or automation skills (Python, PowerShell, Bash) and ability to communicate risks to technical and non-technical stakeholders.

Responsabilités

• Monitor, investigate, and respond to security alerts and incidents across environments, leading containment and remediation.
• Administer and tune security platforms (SIEM, EDR/XDR, firewall, email security, DLP) and automate where possible.
• Perform vulnerability assessments, prioritize remediation by risk, coordinate fixes with owners, and validate completion.
• Support security monitoring across AWS, Azure, and Google Cloud and review vendor and SaaS security.
• Document findings, runbooks, and evidence; support risk assessments and audits aligned with ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK.

Connaissances

Incident investigation

Alerts analysis

Security tools

Endpoint security

Scripting

Risk communication

Formation

Bachelor's degree + 3+ years

Outils

Rapid7

Tenable

CrowdStrike

Microsoft Defender

Palo Alto Prisma/Strata

Description du poste

Credo is seeking a hands‑on Security Engineer to join the Security Engineering team. This role will help protect the company’s systems, infrastructure, cloud environments, applications, endpoints, and data.

The Security Engineer will investigate security alerts and incidents, manage security technologies, assess vulnerabilities, improve security controls, support third‑party security reviews, and partner with infrastructure, cloud, network, application, and business teams to reduce cybersecurity risk.

The successful candidate will be capable of independently investigating technical security issues, driving remediation activities, improving security processes, and clearly communicating findings and risks to stakeholders.

Base salary range is $90,000 - $110,000 a year. The base salary offer will depend on factors such as education, experience, training, skills, qualifications, and location. This position is also eligible for a discretionary bonus, equity and a full range of medical and other benefits.

Why Credo

• Purpose: We invest in what matters. From meaningful-future shaping projects to competitive compensation, we empower you to grow your career while making a lasting impact.
• People: Connection starts within. We collaborate, celebrate wins, and create an environment where everyone can do their best work.
• Possibilities: Our belief shapes what’s next. Our technology powers the most reliable and energy‑efficient connections around the world – and our team powers new products and markets that come next.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field (or equivalent practical experience), plus at least three years in security engineering, security operations, incident response, or vulnerability management.
• Hands‑on experience investigating security alerts and incidents, and analyzing logs from multiple technologies and data sources.
• Experience administering or supporting enterprise security tools, with working knowledge of vulnerability assessment, prioritization, remediation, and validation.
• Strong understanding of endpoint, network, identity, email, cloud, application, and data‑security principles, including Windows and Linux/Unix, TCP/IP, DNS, VPNs, firewalls, and least privilege.
• Scripting or automation skills (Python, PowerShell, Bash), strong documentation and problem‑solving abilities, and the ability to communicate risks to both technical and non‑technical stakeholders.

Preferred Qualifications

• Experience with platforms such as Rapid7, Tenable, CrowdStrike or Microsoft De‑fender, Palo Alto Networks Prisma/Strata, and Proofpoint.
• Familiarity with Microsoft 365 security, cloud‑security tooling across AWS, Azure, or GCP, and DLP or data‑security platforms.
• Exposure to PAM and password vaults, PKI, application control, micro‑segmentation, and virtualization technologies.
• Experience with security orchestration, workflow automation, and ticketing or re‑remediation tracking (e.g., Jira).
• Certifications such as Security+, CySA+, GCIH, GCIA, AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer, or CISSP/Associate of ISC2.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents across endpoint, identity, email, network, cloud, and application environments, leading or supporting containment, remediation, and recovery.
• Administer and tune enterprise security platforms (SIEM, EDR/XDR, firewall/SASE, email security, DLP), including detection rules, integrations, health checks, and automation.
• Perform vulnerability and exposure assessments, prioritize remediation by risk, coordinate fixes with IT and application owners, and validate completion.
• Support security monitoring and secure configuration across AWS, Azure, and Google Cloud, and conduct technical security reviews of vendors, SaaS applications, and new technologies.
• Document findings, runbooks, and evidence; support risk assessments and audits aligned with ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK; and contribute to security projects and continuous improvement.

About Credo

Credo’s mission is to transform connectivity at scale through fast, reliable, and energy‑efficient system solutions. Our high‑speed copper and optical interconnect products deliver industry‑leading power and performance at up to 1.6T to meet the ever‑expanding data infrastructure demands of AI.

Our product portfolio includes ZeroFlap (ZF) Active Electrical Cables (AECs) and ZF optical transceivers, OmniConnect memory solutions, and a suite of retimers and DSPs for optical and copper Ethernet and PCIe, all leveraging the PILOT diagnostic and analytics software platform. Credo innovations enable our customers to connect the systems that connect the world.

Credo is committed to creating an inclusive environment for all employees and welcome applicants from diverse backgrounds without regard to race, color, religion, gender, sex, gender identity, sexual orientation, pregnancy, marital status, national origin, ethnicity, genetic information, age, disability, veteran status, or any other legally protected basis. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email [e-mail].