Security Engineer: Attack Surface & Cloud Security Lead

Celtic Bank; Salt Lake City (UT); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

401(k) plan

Life & disability coverage

HSA & FSA plans

Paid time off

Wellness program

Job summary

Celtic Bank is seeking a Security Engineer to protect systems, data, and technology across identity, network, endpoint, and cloud environments. You’ll administer Rapid7, build asset inventories, and own CAASM to identify at-risk assets.

You’ll lead MFA for endpoints, the SASE conversion, and CASB/SSPM initiatives while supporting incident response and security metrics. You'll also manage CrowdStrike sensors, Dashlane password management, and documentation.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Information Security, or related field; security certifications preferred.
• 3–5 years hands-on information security or enterprise IT experience focused on attack surface, endpoint and identity security.
• Experience administering an attack surface management platform and building asset inventory from discovery data.
• Experience with endpoint detection and response tooling, preferably CrowdStrike, including policy configuration and detection triage.
• Familiarity with SASE, CASB, SSPM concepts and at least one deployment.

Responsibilities

• Administer, configure, and maintain Rapid7 attack surface management platform and asset inventory.
• Own CAASM data to identify unmanaged, unprotected, or misconfigured assets.
• Lead desktop authentication projects, implementing two-factor auth for endpoint sign-in.
• Oversee SASE conversion, policy definition, rollout, and migration from legacy controls.
• Lead CASB and SSPM projects with policy, monitoring, and remediation workflows.
• Maintain CrowdStrike protection, sensor health, and health reporting.
• Maintain Dashlane password management, provisioning, and adoption reporting.
• Support incident response across endpoint, identity, and cloud events.
• Track posture metrics and milestone progress for IT and security leadership.
• Develop and maintain technical runbooks and runbooks.

Skills

Attack surface

CrowdStrike

Two-factor auth

Incident response

CasB / SSSPM

SASE

SSPM

Rapid7

Endpoint security

Regulatory compliance

Education

Bachelor's degree in Information Security or related field

Security+ or SSCP preferred

Tools

Rapid7

CrowdStrike

Dashlane

Job description

Celtic Bank is seeking a Security Engineer to protect systems, data, and technology across identity, network, endpoint, and cloud environments. You’ll administer Rapid7, build asset inventories, and own CAASM to identify at-risk assets.

You’ll lead MFA for endpoints, the SASE conversion, and CASB/SSPM initiatives while supporting incident response and security metrics. You'll also manage CrowdStrike sensors, Dashlane password management, and documentation.