Senior Security Engineer

Emburse; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

Emburse is seeking a Senior Security Engineer to advance our security posture across the organization. You will lead incident response, IAM management, and secure software lifecycle practices, partnering with engineering and product teams to embed shift-left security.

The role requires deep cloud security knowledge (AWS/Azure/GCP), strong scripting skills, and experience with SIEM/IDS and vulnerability management. A Bachelor's degree is required.

Qualifications

• Senior security leadership with mentorship.
• Knowledge of network security, encryption, authentication, access control, and vulnerability management.
• Experience with SIEM, IDS, and vulnerability scanners.
• Deep understanding of cloud security concepts (AWS, Azure, GCP).
• Scripting/automation with Python, PowerShell, or Bash.
• Incident response and forensics incl. log analysis, malware analysis, threat hunting.
• Familiarity with ISO 27001, NIST, PCI DSS.
• Excellent analytical and problem-solving skills; ability to guide others.
• Strong written and verbal communication to stakeholders.

Responsibilities

• Manage security tools and systems (SIEM, IDS/IPS, endpoint protection, vulnerability management).
• Monitor, analyze, and triage security events, alerts, and logs to identify threats and vulnerabilities.
• Perform incident response activities, including containment, eradication, recovery, and documentation.
• Investigate and analyze security incidents, determine root cause, and recommend remediation.
• Execute incident response playbooks and SOPs.
• Collaborate with engineering and product teams to embed shift-left security in the software development lifecycle.
• Assist with vulnerability scanning, segmentation testing, and penetration testing programs.
• Create and maintain security metrics and reporting dashboards for leadership visibility.
• Stay current with evolving threats, vulnerabilities, and industry best practices; recommend enhancements.

Skills

Security leadership

Analytical skills

Communication

Self-starter

Team collaboration

Problem solving

Guiding others

Education

Bachelor's Degree

Tools

SIEM

IDS/IPS

Endpoint protection

Vulnerability scanners

Cloud security (AWS/Azure/GCP)

Job description

Who We Are:

At Emburse, you'll not just imagine the future - you'll build it. As a leader in expense intelligence, we are creating a future where technology drives business value and inspires extraordinary results. Our AI-powered platform helps organizations modernize financial operations, increase visibility, and optimize spend across the enterprise.

As a Senior Security Engineer, you will play a crucial role in maintaining and enhancing our organization's security posture. You will be responsible for implementing and managing security systems, conducting incident response and analysis, reviewing identity & access management entitlements, and proactively identifying and mitigating potential security threats. This role requires a deep understanding of security technologies, excellent problem-solving skills, and team collaboration.

Essential Functions

• Manage security tools and systems (SIEM, IDS/IPS, endpoint protection, vulnerability management).
• Monitor, analyze, and triage security events, alerts, and logs to identify threats and vulnerabilities.
• Perform incident response activities, including containment, eradication, recovery, and documentation.
• Investigate and analyze security incidents, determine root cause, and recommend remediation.
• Execute incident response playbooks and SOPs.
• Triage and manage bug bounty submissions, code scanning results, and vulnerability findings, ensuring remediation and validation.
• Collaborate with engineering and product teams to embed "shift left" security practices in the software development lifecycle.
• Experience with DevSecOps, DevOps, CICD pipelines, and secure code development.
• Assist with internal and external vulnerability scanning, segmentation testing, and penetration testing programs.
• Create and maintain security metrics and reporting dashboards for leadership visibility.
• Stay current with evolving security threats, vulnerabilities, and industry best practices; recommend enhancements to improve the company's security posture.
• Administer and monitor Identity & Access Management (IAM) systems, enforcing least privilege, segregation of duties, and periodic access reviews.
• Develop and maintain policies, procedures, and controls for privileged account management to reduce insider and external risk.

Experience

• Experience in a senior security role with a proven track record of leadership and mentorship.
• Strong knowledge of security principles, technologies, and best practices, including network security, encryption, authentication, access control, and vulnerability management.
• In-depth experience with security tools such as SIEM, IDS, and vulnerability scanners.
• Deep understanding of cloud security concepts and technologies (e.g., AWS, Azure, GCP).
• Proficiency in scripting and automation using languages such as Python, PowerShell, or Bash.
• Experience with incident response and forensics, including log analysis, malware analysis, and threat hunting.
• In-depth understanding of industry standards and frameworks such as ISO 27001, NIST, PCI DSS.
• Excellent analytical and problem-solving skills, with the ability to guide others in the analysis of complex security incidents and provide actionable recommendations.
• Strong communication skills, both written and verbal, with the ability to convey technical concepts to non-technical stakeholders.

Required Skills:

• Excellent analytical skills.
• Self-starter with the ability to work with minimal supervision.
• Experience working on large cross-functional teams, representing security on initiatives such as change management, identity and access management, policy management, and data retention.
• Strong writing skills and the ability to communicate information about complex issues to stakeholders in a clear and easy to understand way
• Ability to develop creative and adaptive solutions to unique and complex inquiries
• Comfortable with a rapid-pace working environment and meeting deadlines
• Team-focused, positive attitude, and good sense of humor

Education & Certifications:

• Required: Bachelor's Degree; Minimum 5+ years of technology project/program management.

Why Emburse?

• A Company with Momentum - We serve 12M+ users across 120 countries, helping businesses modernize their finance operations.
• A Team That Innovates - Work alongside some of the brightest minds in finance, tech, and AI to solve real-world challenges.
• A Culture That Empowers - Competitive pay, flexible work, and an inclusive, collaborative environment that supports your success.
• A Career That Matters - Your work here drives efficiency, innovation, and smarter financial decision-making for businesses everywhere.

Shape your future & find what's next at Emburse.

Emburse provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Emburse complies with applicable state and local laws governing nondiscrimination in employment in every location where the company has facilities. This policy applies to all terms and conditions of employment.