Senior Security Engineer

Henderson Scott

Boston (MA)

Hybrid

USD 170,000 - 200,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

A technology services provider is seeking a Senior Security Engineer to enhance security posture in cloud-native and hybrid environments. Responsibilities include platform integration, threat detection, and compliance with NIST standards. The ideal candidate holds a Master’s degree in Information Security, possesses GIAC and Microsoft Cloud certifications, and is experienced in security platform management. This full-time position offers a base salary of $175,000 plus a 15% bonus, with a hybrid work model available.

Qualifications

Hands-on, senior security engineer with a focus on cloud-native environments.
Experience in security platform integration and threat detection.
Ability to communicate complex security concepts to stakeholders.

Responsibilities

Lead integration and optimization of security platforms.
Ensure compliance with NIST and SOC standards.
Mentor junior staff and foster a security-first culture.

Skills

Security posture enhancement

Threat detection

Integration with Zscaler and Wiz

Proactive threat hunting

Compliance with NIST and SOC standards

Mentoring junior staff

Education

Master’s degree in Information Security or related field

GIAC certifications (GCIA, GCIH etc.)

Microsoft Cloud Security certifications

Tools

GitGuardian

CyberHaven

Zscaler

Microsoft Defender for Office 365

Job description

Base pay range

$170,000.00/yr - $200,000.00/yr

Location

Hybrid / Remote – NJ, CT, NC, MA, PA, VA, MD, DC, FL (New York & Boston candidates: Office-based; Other listed states: Remote employees considered)

Contract

Full-time, Hybrid / Flexible – 35‑hour week

Salary

$175,000 base + 15% bonus

Title

Senior Security Engineer (US)

Overview

We are seeking a hands‑on, senior security engineer to proactively strengthen our security posture across cloud‑native and hybrid environments. This highly technical, strategic role will lead security platform integration, governance, threat detection, and mentoring, while influencing security‑first practices across the organisation.

Key Responsibilities

Security Architecture & Engineering

Lead integration and optimisation of Zscaler, Wiz (EDR/CSPM/CNAPP), and endpoint protection (EDR/XDR) to maximise prevention, detection, and response.
Develop detection rules and manage analytics in Microsoft Sentinel and Wiz.
Conduct proactive threat hunting, posture management, and remediation validation.
Administer Zscaler Internet Access (ZIA), including policy tuning, SSL inspection, forwarding profiles, and authentication flows.
Troubleshoot traffic flows and collaborate with DevOps, IT, and R&D to integrate security into CI/CD pipelines and infrastructure‑as‑code.

Compliance, Audit & Governance

Ensure compliance with NIST SP 800‑53, NIST SP 800‑171, SOC 2, ISO/IEC 27001:2022, and client‑specific requirements.
Lead audits, penetration testing, and maintain continuous audit readiness.

Security Operations & Incident Response

Develop, tune, and manage detection rules and playbooks across Wiz, Zscaler, and other platforms aligned with MITRE ATT&CK.
Hunt threats, triage alerts, and lead incident investigations.
Manage advanced email security with Microsoft Defender for Office 365.
Drive automation and orchestration initiatives to improve operational efficiency.

Stakeholder Engagement & Leadership

Act as a technical advisor on Zero Trust, cloud security, and operations.
Mentor junior staff and foster a security‑first culture.
Communicate complex security concepts clearly to technical and non‑technical stakeholders, including senior leadership.

Mandatory Platform Expertise