Security Engineer - Corporate Security

Cacheflow; United States; On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Paid parental leave

Flexible time off

401(k) plan with company contributions

Life and disability insurance

Tuition reimbursement

Job summary

Bitsight is seeking a Cybersecurity Engineer to strengthen and scale our security capabilities. You will develop security strategy, implement security technologies, and defend against threats.

You will deploy and manage SIEM/EDR, lead incident handling, enforce least privilege, and contribute to AI governance and secure architectures. Strong communication is essential for cross‑functional collaboration and executive briefs.

Qualifications

• 4+ years in dedicated information security roles.
• Hands-on experience with SIEM and EDR solutions.
• Expertise in incident response and SOC operations.
• Knowledge of least privilege access principles and defense-in-depth.
• Understanding of TCP/IP networking and security protocols.
• Knowledge of AWS cloud environments and related security tools.
• Excellent verbal and written communication, able to engage technical, non-technical, and executive audiences.

Responsibilities

• Develop and enhance security strategies to protect against emerging threats.
• Deploy and manage SIEM, EDR, and cloud security technologies to monitor and respond to incidents effectively.
• Lead or participate in security incident handling and response, including SOC operations and DFIR.
• Enforce least privilege access principles and secure network architectures.
• Support AI governance initiatives, evaluating AI security risks, contributing to AI usage policies, and implementing controls for AI tools and integrations.
• Work autonomously while also thriving in a collaborative team environment.
• Utilize defense‑in‑depth methodology to enhance and sustain a secure environment.

Skills

SIEM & EDR

SOC operations

Threat detection

Python for security

Networking fundamentals

AWS security

Communication skills

Tools

Suricata

YARA

Sigma

Job description

Bitsight is hiring a Cybersecurity Engineer to strengthen and scale our security capabilities. The role focuses on developing security strategy, implementing security technologies, and defending against threats.

Key Responsibilities

• Develop and enhance security strategies to protect against emerging threats.
• Deploy and manage SIEM, EDR, and cloud security technologies to monitor and respond to incidents effectively.
• Lead or participate in security incident handling and response, including SOC operations and DFIR.
• Enforce least privilege access principles and secure network architectures.
• Support AI governance initiatives, evaluating AI security risks, contributing to AI usage policies, and implementing controls for AI tools and integrations.
• Work autonomously while also thriving in a collaborative team environment.
• Utilize defense‑in‑depth methodology to enhance and sustain a secure environment.

Required Qualifications

• 4+ years of experience in dedicated information security roles.
• Hands‑on experience with SIEM and EDR solutions.
• Expertise in security incident response and SOC operations.
• Strong knowledge of least privilege access principles and defense‑in‑depth methodologies.
• Solid understanding of TCP/IP networking and security protocols.
• Understanding of AWS cloud environments and working with related security technologies.
• Excellent verbal and written communication skills, with the ability to engage technical, non‑technical, and executive audiences.

Preferred Qualifications

• Experience with vulnerability management, assessment, and remediation.
• Familiarity with adversarial TTPs and attack frameworks (MITRE ATT&CK, etc.).
• Knowledge of AI/LLM security risks, including prompt injection, model misuse, data exposure, and agentic AI threats.
• Experience evaluating or implementing AI governance and security controls.
• Knowledge of security compliance frameworks (SOC 2, CIS, NIST 800 series, ISO 27001).
• Experience with detection engineering tools (Suricata, YARA, Sigma).
• Proficiency in Python for security automation, including threat detection and compliance workflows.

Preferred Certifications

• AWS Certified Security Specialty
• SANS Certifications: GCIA, GCIH, GCFA, GCTI
• ISC2: CISSP or CCSP
• CompTIA Security+

Salary & Benefits

The anticipated hiring base salary range for this position is US $100,000 to $140,000 annually for US‑based employees. In addition to base salary, this role is eligible for participation in a bonus or commission plan and an equity grant. Bitsight offers a comprehensive benefits package, including medical, dental, vision insurance; paid parental leave; flexible time off; a 401(k) plan with employee and company contributions; life and disability insurance; and tuition reimbursement.

Belonging & Inclusion

Bitsight is an equal‑opportunity employer. We do not tolerate discrimination of any kind and are committed to providing equal employment opportunities regardless of gender identity, race, nationality, religion, sexual orientation, veteran status, or disability status.

Accommodation Requests

Bitsight provides reasonable accommodations to qualified individuals with disabilities or based on a sincerely held religious belief. If you need assistance with a reasonable accommodation, please email [e-mail]. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

Additional Information for United States Applicants

Bitsight is committed to compliance with all fair employment practices regarding citizenship and immigration status. Bitsight will not discriminate based on inquiries about compensation. Qualified applicants with criminal histories will be considered for employment consistent with applicable law. This position may be considered a promotional opportunity pursuant to the Colorado Equal Pay for Equal Work Act.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Bitsight will not discharge, discipline, or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant.