Senior Security & Compliance Engineer

LHH; Smyrna (GA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life Insurance

Short-term Disability

Voluntary Benefits

EAP

Commuter Benefits

401K

Job summary

LHH is seeking a Senior Security Engineer in Smyrna, GA to serve as the senior U.S.-based security resource. This role combines hands-on security engineering with risk management, incident response leadership, and security strategy to mature the organization’s overall security posture across cloud, e-commerce platforms, networks, and endpoints.

You will work with technology leadership and distributed teams to drive security initiatives, build runbooks, and contribute to the long-term security

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field, or equivalent experience.
• Significant cybersecurity experience across cloud, network, and application security.
• Hands-on experience implementing, configuring, investigating, and remediating security controls.
• Experience securing GCP, AWS, or Azure environments.

Responsibilities

• Design, implement, and maintain security controls across cloud, network, endpoint, identity, and application environments.
• Investigate security alerts, vulnerabilities, incidents, and suspicious activity.
• Conduct vulnerability assessments and drive remediation efforts.
• Coordinate incident response planning, runbooks, and桌上 exercises.
• Partner with engineering teams to integrate security into infrastructure and deployment processes.

Skills

Identity & Access Management

Vulnerability Management

Network Security

Security Monitoring & Logging

Cloud Security

Education

Bachelor's degree in Information Security or related field

Tools

SIEM

WAF

Vulnerability scanning tools

Job description

Our client is a growing e-commerce and retail organization seeking a Senior Security Engineer to serve as the organization's senior U.S.-based security resource. This is a highly visible role offering the opportunity to own security initiatives across cloud infrastructure, e-commerce platforms, networks, applications, endpoints, incident response, and compliance.

This position is ideal for a security professional who enjoys balancing hands‑on security engineering (60-70%) with risk management, incident response leadership, and security strategy (30-40%).

You'll work closely with technology leadership and distributed technical teams while helping mature the organization's overall security posture and long-term security roadmap.

What You’ll Do

Security Engineering & Operations

• Design, implement, and maintain security controls across cloud, network, endpoint, identity, and application environments.
• Investigate security alerts, vulnerabilities, suspicious activity, and security incidents.
• Conduct vulnerability assessments and drive remediation efforts.
• Strengthen security monitoring, detection, and prevention capabilities.
• Evaluate and improve existing security controls and operational processes.
• Secure cloud environments supporting critical business applications and e-commerce operations.
• Implement best practices around identity management, access controls, logging, monitoring, and secure configurations.
• Partner with engineering teams to integrate security into infrastructure, applications, APIs, and deployment processes.
• Support environments utilizing GCP, AWS, Azure, or similar cloud platforms.

E-Commerce & Digital Security

• Improve security monitoring and hardening of customer-facing web applications and e-commerce platforms.
• Monitor emerging threats impacting web applications, APIs, and online commerce environments.
• Support technologies such as web application firewalls, edge security solutions, bot mitigation, and traffic protection.
• Help protect customer data and critical business systems while balancing security and user experience.
• Lead the development and enhancement of incident response plans and procedures.
• Build and maintain runbooks, escalation paths, response workflows, and tabletop exercises.
• Coordinate investigations, containment, remediation, and post-incident reviews.
• Partner with infrastructure teams to improve disaster recovery and operational resilience programs.

Risk, Compliance & Security Program Development

• Conduct security risk assessments and prioritize remediation efforts based on business impact.
• Support PCI DSS compliance initiatives and related control management activities.
• Assist with third‑party security assessments, audits, penetration testing, and remediation tracking.
• Maintain security documentation, risk registers, and audit‑ready records.
• Monitor evolving security threats, vulnerabilities, and regulatory requirements.
• Serve as a trusted advisor to technology leadership and key stakeholders.
• Translate technical findings into practical business recommendations.
• Provide guidance and mentorship to distributed technical teams.
• Promote security awareness and secure practices throughout the organization.
• Contribute to the future development and maturity of the security function.

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent experience.
• Significant experience in cybersecurity, information security, cloud security, infrastructure security, or related disciplines.
• Recent hands‑on experience implementing, configuring, investigating, and remediating security controls.
• Experience securing public cloud environments such as GCP, AWS, or Azure.
• Strong knowledge of:
• Identity & Access Management
• Vulnerability Management
• Network Security
• Security Monitoring & Logging
• Experience securing internet‑facing applications, APIs, websites, or e-commerce platforms.
• Strong communication, documentation, and stakeholder management skills.
• Ability to prioritize security risks and develop practical remediation roadmaps.

Preferred Qualifications

• Familiarity with cloud security in GCP.
• Experience with web application firewalls, edge security technologies, or traffic protection solutions.
• PCI DSS compliance experience.
• Experience supporting disaster recovery and business continuity initiatives.
• Exposure to privacy and data protection frameworks.
• Experience with SIEM, endpoint protection, and vulnerability management platforms.
• CISSP, CISM, CISA, cloud‑security certification, or comparable credentials.
• Prior experience leading projects, mentoring engineers, or influencing cross‑functional teams.

Why This Opportunity?

• High‑impact security leadership role with strong executive visibility.
• Opportunity to influence security strategy while remaining technically hands‑on.
• Broad exposure across cloud security, incident response, e-commerce security, and compliance.
• Collaborative environment with opportunities for future leadership growth.
• Competitive compensation, bonus eligibility, and comprehensive benefits package.
• Work with modern technologies supporting a rapidly growing digital business.

Work Arrangement: Primarily onsite with some flexibility

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status, or any other protected characteristic.

Why this version is LinkedIn-safe

• Removes company‑specific operational details, security architecture, and internal organizational information.
• Avoids disclosing sensitive technologies, staffing structures, and incident‑response maturity levels.
• Preserves keywords that drive applicant traffic: Security Engineer, Cloud Security, Incident Response, PCI DSS, E-Commerce Security, GCP, AWS, Azure, WAF, SIEM, Vulnerability Management, CISSP, CISM.
• Focuses on responsibilities, qualifications, growth opportunity, and candidate attraction rather than confidential business details.

“Benefit offerings include medical, dental, vision, life insurance, short‑term disability, additional voluntary benefits,

EAP program, commuter benefits, and 401K plan. Our program provides employees the flexibility to choose the type

of coverage that meets their individual needs. Available paid leave may include Paid Sick Leave, where required by

law; any other paid leave required by Federal, State, or local law; and Holiday pay upon meeting eligibility criteria.”

“Equal Opportunity Employer/Veterans/Disabled

To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://www.lhh.com/us/en/candidate-privacy

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

The California Fair Chance Act

Los Angeles City Fair Chance Ordinance

Los Angeles County Fair Chance Ordinance for Employers