Senior Security Architect – Threat Modeling & Incident Response

Valmar Holdings LLC.; Village of Williamsville (NY); Hybrid; USD 140,000 - 200,000; Full time

Job summary

Valmar Holdings LLC is seeking a Principal Security Engineer to protect systems, data, and customer trust across Valmar Merchant Services and Totality LMS. You will work with product and platform teams to identify attack surfaces and implement strong controls within a hybrid Buffalo/Williamsville, NY environment.

The role involves hands-on testing of applications, APIs, and cloud infrastructure, leading incident response, and driving SOC 2 and PCI DSS readiness.

Qualifications

• Hands-on testing of apps and APIs with exploitation validation.

Responsibilities

• Review designs to map attack vectors and build controls.
• Perform authorized penetration testing across apps, APIs, and cloud.
• Test authentication and authorization end to end.
• Assess third-party integrations and data access.
• Lead security incident response and remediation.
• Drive SOC 2 and PCI DSS evidence across audits.
• Embed security into CI/CD and development workflows.
• Educate engineers with practical design guidance.

Skills

App & API security

AWS security

CI/CD security

Incident response

SOC 2 / PCI DSS

Security design

Third-party review

Technical leadership

AI-assisted security

Tools

Burp Suite

ZAP

Nmap

Wireshark

Semgrep

Trivy

Prowler

GuardDuty

AI security tools

Job description

Valmar Holdings LLC is seeking a Principal Security Engineer to protect systems, data, and customer trust across Valmar Merchant Services and Totality LMS. You will work with product and platform teams to identify attack surfaces and implement strong controls within a hybrid Buffalo/Williamsville, NY environment.

The role involves hands-on testing of applications, APIs, and cloud infrastructure, leading incident response, and driving SOC 2 and PCI DSS readiness.