Senior AppSec Engineer - Threat Detection & Cloud Security

Recru; Houston (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Recru is seeking a Senior Security Engineer to protect enterprise applications, cloud, identities, endpoints, and networks. The role emphasizes application security, threat detection, incident response, vulnerability management, SIEM engineering, and security automation in a regulated environment.

You will drive security initiatives, investigate incidents, develop SIEM detections, and support PCI DSS compliance while partnering with cross‑functional teams to embed security throughout the

Qualifications

• 3-5+ years of cybersecurity, security engineering, AppSec, or SOC experience.
• Experience with application security, vulnerability management, and incident response.
• Hands‑on experience with SIEM, EDR, firewalls, and threat hunting.

Responsibilities

• Drive application security initiatives, vulnerability assessments, and remediation efforts.
• Investigate and respond to security incidents across cloud, identity, endpoint, and network environments.
• Develop and tune SIEM detections, threat-hunting activities, and automated response workflows.
• Manage vulnerability scanning, risk prioritization, and remediation tracking.
• Support Microsoft Entra ID, MFA, Conditional Access, and Zero Trust initiatives.
• Partner with development, infrastructure, and network teams to embed security throughout the environment.
• Support PCI DSS compliance and security governance initiatives.

Skills

Cybersecurity

AppSec

Incident response

Scripting

Tools

SIEM

EDR

Firewalls

Threat hunting

Job description

Recru is seeking a Senior Security Engineer to protect enterprise applications, cloud, identities, endpoints, and networks. The role emphasizes application security, threat detection, incident response, vulnerability management, SIEM engineering, and security automation in a regulated environment.

You will drive security initiatives, investigate incidents, develop SIEM detections, and support PCI DSS compliance while partnering with cross‑functional teams to embed security throughout the