Security Engineer- (Hybrid – onsite as needed)

Lumecg; Sacramento (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading consulting firm is seeking an experienced Security Engineer to lead remediation efforts for mission-critical applications. In this role, you will develop and implement a comprehensive security remediation plan, classify and categorize data, and integrate security tools to address application vulnerabilities effectively. The ideal candidate will have over 10 years of experience in security engineering, with expertise in leading data classification efforts and conducting SAST and DAST scans. This position offers the opportunity to significantly contribute to improving company security practices.

Qualifications

• 10+ years of experience in Security Engineering.
• Proven experience in leading data classification and categorization efforts.
• Conducting SAST/DAST scans and documenting remediation.

Responsibilities

• Develop and implement a security remediation plan.
• Classify and categorize data to enforce security policies.
• Address application vulnerabilities through collaboration with development teams.

Skills

Security Engineering

Data classification

SAST/DAST scans

Vulnerability remediation

IAM solutions integration

Education

Master’s degree in Computer Science

Tools

Mend

Invicti

Job description

Lume Consulting Group is seeking an experienced Security Engineer to lead remediation efforts across mission‑critical applications.

You will develop and implement a security remediation plan, classify and categorize data, integrate security tools, and address application vulnerabilities.

Mandatory Qualifications

• 10+ years of experience in Security Engineering, including:
• Leading data classification and categorization efforts
• Conducting SAST/DAST scans and documenting remediation
• Documenting "as‑is" security reports and user stories
• Collaborating with developers to remediate vulnerabilities
• Integrating IAM solutions and applying least privilege principles
• Experience documenting security risks and issues, such as reused/common credentials, plaintext PII, unencrypted data

Desirable Qualifications

• Master’s degree in Computer Science
• Certified Information Systems Security Professional (CISSP)
• Experience with Mend and Invicti or similar tools (10+ years)