Security Engineer: Design Defenses & Incident Response

Sensei Media Concept; Union (NJ); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Sensei Media Concept is seeking a Security Engineer to help build defences and assess them across fintech, B2B SaaS, and infrastructure projects. You will design baselines, conduct code and infrastructure security reviews, and support regulatory compliance efforts including ISO 27001 and GDPR.

You will configure SIEM, WAF, and IDS/IPS, respond to incidents, and participate in threat modelling at design time. The role requires hands-on security work and a proactive, attacker-minded approach.

Qualifications

• 4+ years in information security, with at least 2 years protecting production systems
• Deep network security understanding: TLS, firewall rules, zero-trust fundamentals
• Experience owning at least one audit (ISO 27001 or 152-FZ)
• Writing security policies that people actually follow

Responsibilities

• Design security baselines for client products: networking, IAM, secrets management, logging
• Conduct security reviews of code and infrastructure as part of the normal workflow
• Help clients achieve regulatory compliance: 152-FZ, ISO 27001, GDPR
• Configure SIEM, WAF, IDS/IPS — and help teams actually use them
• Respond to incidents: analysis, containment, post-mortem
• Participate in threat modelling at the design stage, not after launch

Skills

Information security

Threat modelling

Attacker mindset

Security policy writing

Regulatory compliance

Education

Certifications: CISSP, CISM, CEH, OSCP

Tools

SIEM

WAF

IDS/IPS

Job description

Sensei Media Concept is seeking a Security Engineer to help build defences and assess them across fintech, B2B SaaS, and infrastructure projects. You will design baselines, conduct code and infrastructure security reviews, and support regulatory compliance efforts including ISO 27001 and GDPR.

You will configure SIEM, WAF, and IDS/IPS, respond to incidents, and participate in threat modelling at design time. The role requires hands-on security work and a proactive, attacker-minded approach.