Senior Security Engineer

Cybersecurity Jobs; Bellevue (WA); Hybrid; USD 160,000 - 191,000; Full time

Benefits offered by this job

Health insurance

Paid time off and holidays

401(k) with employer match

Wellness programs

Job summary

AAA Washington is seeking a Senior Security Engineer for a hybrid Bellevue-based role. You will implement and operate security controls, investigate events, remediate vulnerabilities, and strengthen security across IT, cloud, endpoint, network, application, and identity environments.

You will support security monitoring and incident response while advising IT and business stakeholders. Expect to improve detection and response via log analysis, rule tuning, and procedures refinement.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5+ years of information security, cybersecurity, security engineering, infrastructure security, or related discipline.
• Experience implementing and operating enterprise security technologies.
• Strong understanding of network, endpoint, identity, cloud, and infrastructure security principles.
• Experience with security monitoring, incident investigation, and vulnerability management.
• Experience with security tools such as EDR, SIEM, vulnerability management, firewalls, WAF, DLP, IAM, or related technologies.

Responsibilities

• Design, implement, and maintain security controls across on-premises, cloud, endpoint, network, application, and identity environments.
• Evaluate security architectures and recommend improvements to AAA Washington's security posture.
• Collaborate with IT and engineering teams to incorporate security into infrastructure, application, and technology projects.
• Develop and maintain secure configuration standards and technical security baselines.
• Participate in security architecture and technology reviews for new systems, applications, vendors, and services.
• Identify opportunities to automate security controls, monitoring, and response activities.
• Monitor security alerts and investigate potential security events and incidents.
• Support incident response work, including investigation, containment, eradication, and recovery.
• Analyze security logs and telemetry from SIEM, EDR, identity, network, cloud, and other security platforms.
• Develop and improve detection rules, alerting, and security monitoring capabilities.
• Conduct root-cause analysis after significant security events.
• Participate in incident response exercises and continuously improve response procedures.
• Escalate significant security events in line with AAA Washington incident response procedures.
• Serve as a technical security advisor to IT and business stakeholders.
• Communicate technical security risks and recommendations in ways that fit both technical and non-technical audiences.
• Mentor and provide technical guidance to junior security engineers and analysts.
• Promote a culture of security ownership throughout AAA Washington.
• Participate in security awareness and education activities when appropriate.
• Other duties as assigned.

Skills

Analytical skills

Independent worker with collaboration

Troubleshooting security issues

Communication to non-technical teams

Education

Bachelor's degree or equivalent

Tools

EDR

SIEM

Firewalls

WAF

DLP

IAM

PowerShell

Python

Job description

AAA Washington is hiring a Senior Security Engineer for a hybrid role based in Bellevue, WA. In this position, you will help implement and operate security controls, investigate security events, remediate vulnerabilities, and strengthen security across IT, cloud, endpoint, network, application, and identity environments.

You will also support security monitoring and incident response while acting as a technical advisor to IT and business stakeholders. The role includes improving detection and response capabilities through log and telemetry analysis, rule tuning, and continuous refinement of procedures.

Core Responsibilities

• Design, implement, and maintain security controls across on-premises, cloud, endpoint, network, application, and identity environments.
• Evaluate security architectures and recommend improvements to AAA Washington's security posture.
• Collaborate with IT and engineering teams to incorporate security into infrastructure, application, and technology projects.
• Develop and maintain secure configuration standards and technical security baselines.
• Participate in security architecture and technology reviews for new systems, applications, vendors, and services.
• Identify opportunities to automate security controls, monitoring, and response activities.
• Monitor security alerts and investigate potential security events and incidents.
• Support incident response work, including investigation, containment, eradication, and recovery.
• Analyze security logs and telemetry from SIEM, EDR, identity, network, cloud, and other security platforms.
• Develop and improve detection rules, alerting, and security monitoring capabilities.
• Conduct root-cause analysis after significant security events.
• Participate in incident response exercises and continuously improve response procedures.
• Escalate significant security events in line with AAA Washington incident response procedures.
• Serve as a technical security advisor to IT and business stakeholders.
• Communicate technical security risks and recommendations in ways that fit both technical and non-technical audiences.
• Mentor and provide technical guidance to junior security engineers and analysts.
• Promote a culture of security ownership throughout AAA Washington.
• Participate in security awareness and education activities when appropriate.
• Other duties as assigned.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
• 5+ years of experience in information security, cybersecurity, security engineering, infrastructure security, or a related technical discipline.
• Demonstrated experience implementing and operating enterprise security technologies.
• Strong understanding of network, endpoint, identity, cloud, and infrastructure security principles.
• Experience with security monitoring, incident investigation, and vulnerability management.
• Experience working with security tools such as EDR, SIEM, vulnerability management, firewalls, WAF, DLP, IAM, or related technologies.
• Experience developing security configurations, standards, procedures, and technical documentation.
• Ability to troubleshoot complex technical security issues.
• Strong analytical and problem-solving skills.
• Ability to work independently while collaborating effectively across technical and business teams.

Technologies and Frameworks

• CISSP, Security+, CySA+, GIAC, CCSP
• EDR, SIEM, firewalls, WAF, DLP, IAM
• Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Intune, Microsoft Purview
• Microsoft Azure, PowerShell, Python
• NIST CSF, ISO 27001, CIS Controls
• PCI DSS, SOX, SOC 2

Benefits

• Health insurance (medical, vision, dental and prescription drug)
• Up to 22 days of Paid Time Off (PTO) in the first year
• Eleven paid holidays in addition to PTO
• 401(k) with Employer Match
• Life, Short-Term Disability and Long-Term Disability insurance
• Flexible Spending Accounts
• 4 Hours of Volunteer Time Off per year
• On-Demand Pay / Earned Wage Access
• Free Premier RV AAA Washington Membership
• Travel, Insurance, and Membership Discounts and Perks
• Paid, on-going training throughout your career
• THRIVE wellness program
• Tax-advantaged commuter benefit
• Free parking
• Financial Literacy Education

Preferred Qualifications

• Experience with Microsoft security technologies and the Microsoft security ecosystem.
• Experience with Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Intune, and Microsoft Purview.
• Experience with cloud security, particularly Microsoft Azure.
• Experience with vulnerability management platforms and security scanning.
• Experience with identity and privileged access management.
• Experience implementing security controls aligned with NIST CSF, ISO 27001, CIS Controls, or similar frameworks.
• Experience supporting PCI DSS, SOX, SOC 2, or other compliance requirements.
• Experience with scripting or automation using PowerShell, Python, or similar technologies.

Certifications

• CISSP
• Security+
• CySA+
• GIAC
• CCSP

Salary and Work Environment

• Hiring Range: $159,528 - $191,454 per year
• Discretionary bonus based on company performance
• Hybrid work from home and office required
• Rarely Travel
• Equipment used includes computer, phone, various virtual technologies, and other office equipment

To support your success in this role, AAA Washington describes the physical environment as typical of a standard office space, requiring work indoors and the ability to remain stationary for more than 50% of the time, with occasional movement to access equipment and office resources.

Disclaimer: Job characteristics described here are representative of those encountered while performing essential functions. Reasonable accommodations may be made for individuals with disabilities.