Senior IT Security Engineer

IntegraTouch Group; City of Rochester (NY); On-site; USD 150,000 - 230,000; Full time

Job summary

IntegraTouch is seeking a Senior Security Engineer to own a business-critical security function and shape security strategy for client-facing SaaS solutions. You will work with the CTO and development teams to implement robust controls across cloud, applications, data, and internal systems.

Reporting to the CTO, you will lead cloud/infrastructure security, IAM, compliance, and automation initiatives, delivering measurable protections and scalable practices across the org.

Qualifications

• Proven hands-on security engineering experience.
• Experience implementing and operating production security controls.
• Strong AWS security across IAM, networking, encryption, secrets, and logging.
• Experience with SOC 2 readiness/examinations.
• Knowledge of SaaS, web app, API, and database security.
• Experience with vulnerability management, penetration testing remediation, and incident response.
• Scripting with Python/PowerShell/Bash.
• Familiarity with infrastructure as code and CI/CD workflows.
• Ability to translate security requirements into practical controls and communicate risks clearly.
• Ownership mindset in a small, growing team.

Responsibilities

• Build and execute a security roadmap aligned with growth and risk.
• Lead SOC 2 readiness and evidence collection and remediation.
• Secure AWS environments, networks, servers, databases, and secrets management.
• Implement least privilege, MFA, SSO, and RBAC across systems.
• Strengthen app/API security with developers and secure data handling.
• Integrate security checks into CI/CD pipelines and testing.
• Own vulnerability management, monitoring, and incident response.
• Coordinate penetration testing and fix verification with engineers.
• Lead security questionnaires and third-party risk assessments.
• Automate controls, evidence collection, and recurring tasks.
• Establish safeguards for AI-enabled tools and data exposure.
• Collaborate across teams on security QA and release validation.

Skills

Security engineering

AWS security

SOC 2 readiness

SaaS security

Vulnerability management

Scripting (Python/PowerShell/Bash)

CI/CD familiarity

Communication

DevSecOps

Tools

Terraform

CloudTrail

GuardDuty

Security Hub

Job description

IntegraTouch is recruiting for a confidential, rapidly growing technology company seeking a Senior Security Engineer to take ownership of a business-critical function. You will shape the security strategy, implement the technical controls, and help the company confidently expand its client-facing SaaS solutions.

Your decisions will influence how the company builds products, protects information, earns client trust, and supports growth. For a security professional who enjoys turning ideas into working solutions, this is an opportunity to make a visible impact across the business.

Reporting directly to the CTO, you will combine security leadership with hands‑on engineering across cloud infrastructure, applications, data, and internal systems. You will have broad responsibility and the opportunity to help define the tools, processes, and capabilities the company needs next.

The Opportunity

We are looking for someone who can connect strategy with execution: establish a policy, configure the supporting technology, investigate a vulnerability, partner with developers on a fix, and demonstrate that the controls work.

You will join a small, collaborative team where initiative matters and your expertise will help guide decisions. Security is your primary responsibility, with opportunities to contribute to automation, technical troubleshooting, security testing, and other engineering priorities.

What You Will Own

• Security strategy and policy: Build and execute a prioritized security roadmap aligned with business growth, client commitments, and risk.
• Compliance and audit readiness: Lead SOC 2 readiness and ongoing examination support, including control implementation, evidence collection, assessor coordination, and remediation.
• Cloud and infrastructure security: Secure AWS environments, networks, servers, databases, endpoints, encryption, secrets, and production access.
• Identity and access management: Implement least privilege, multifactor authentication, single sign‑on, role‑based access, and controls for service accounts and workload identities.
• Application and API security: Partner with developers to strengthen authentication, authorization, client data isolation, secure integrations, and protection of sensitive information.
• Secure software delivery: Integrate code analysis, dependency scanning, secrets detection, and security checks into CI/CD pipelines.
• Security operations and response: Own vulnerability management, monitoring, incident investigation, technical containment, and recovery.
• Security testing and remediation: Coordinate penetration testing, prioritize findings, and work with engineering to verify fixes.
• Client and vendor assurance: Lead security questionnaire responses, support client assessments, and evaluate third‑party security risks.
• Resilience and automation: Strengthen recovery capabilities and automate controls, evidence collection, and recurring operational tasks.
• AI security: Establish practical safeguards for sensitive‑data exposure, third‑party access, and permissions associated with AI‑enabled tools.
• Cross‑functional collaboration: Contribute to security‑focused QA, release validation, production troubleshooting, and targeted scripting or development.

What You Bring

• Proven hands‑on experience in security engineering, cloud security, infrastructure security, or DevSecOps.
• Direct responsibility for implementing, troubleshooting, and operating production security controls.
• Strong AWS security experience across identity and access management, networking, encryption, secrets management, and logging.
• Experience supporting SOC 2 readiness or examinations, including implementing controls, collecting evidence, and resolving findings.
• Working knowledge of SaaS, web application, API, and database security.
• Experience with vulnerability management, penetration test remediation, security monitoring, and incident response.
• Scripting and automation skills using Python, PowerShell, Bash, or a comparable language.
• Familiarity with infrastructure as code and CI/CD workflows.
• Experience translating security frameworks and client requirements into practical technical controls.
• Clear communication, sound judgment, and the ability to explain risks and recommendations to technical and business audiences.
• The initiative to take ownership and the flexibility to contribute within a small, growing team.

Experience That Will Help You Stand Out

• Building or significantly improving a security program within a growing technology or SaaS company.
• A foundation in cloud infrastructure, systems engineering, DevOps, or software development.
• SOC 2 Type II examination support and experience protecting sensitive data in regulated environments.
• Terraform and AWS services such as IAM, KMS, VPC, Secrets Manager, CloudTrail, Config, GuardDuty, and Security Hub.
• C#/ASP.NET Core, SQL Server, and Windows Server. Comparable application security experience in other stacks is welcome; .NET expertise is not required.
• Windows and Apple endpoint security and device management.
• NIST CSF 2.0, OWASP‑informed application security, and third‑party risk assessments.
• Experience evaluating managed security providers and recommending security tools.
• Relevant certifications such as CISSP, CCSP, CISM, or SSCP. Certifications are valued but not required.

Why Join

• Own a pivotal function: Your work will directly support product delivery, client confidence, and business growth.
• Influence decisions: Work directly with the CTO and contribute your expertise where it matters.
• Build and implement: Combine strategic ownership with substantial hands‑on technical work.
• Shape what comes next: Help define the security roadmap, technology investments, external partnerships, and future staffing needs.
• See your impact: Deliver improvements that are visible across the company and its client relationships.