Senior Security Engineer

Colonial Group

Factoria (WA)

Hybrid

USD 160,000 - 191,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Health insurance

PTO and holidays

401(k) with employer match

Life and disability insurance

Flexible Spending Accounts

Volunteer time off

On-Demand Pay / Earned Wage Access

AAA Washington membership

Travel, insurance, and membership скид

Paid training and Thrive wellness

Commuter benefit

Job summary

AAA Washington is seeking a Senior Security Engineer to partner with IT Infrastructure, Cloud, Applications, Data, and Service Desk teams to implement security controls and investigate incidents. You will develop secure configurations, monitor alerts, and drive security improvements across on-premises, cloud, and identity environments.

You will mentor junior engineers, communicate risks to both technical and non-technical audiences, and support a culture of security ownership throughout the

Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent practical experience.
5+ years of experience in information security, cybersecurity, security engineering, infrastructure security, or related technical discipline.
Experience implementing and operating enterprise security technologies.
Strong understanding of network, endpoint, identity, cloud, and infrastructure security principles.
Experience with security monitoring, incident investigation, and vulnerability management.

Responsibilities

Security Engineering & Architecture: design, implement, and maintain security controls across on-premises, cloud, endpoint, network, application, and identity environments.
Evaluate security architectures and provide recommendations to improve AAA Washington's security posture.
Partner with IT and engineering teams to incorporate security into infrastructure, application, and technology projects.
Develop and maintain secure configuration standards and technical security baselines.
Participate in security architecture and technology reviews for new systems, vendors, and services.
Identify opportunities to automate security controls, monitoring, and response activities.
Security Monitoring & Incident Response: monitor security alerts and investigate potential events and incidents.
Participate in incident response activities, including investigation, containment, eradication, and recovery.
Analyze security logs and telemetry from SIEM, EDR, identity, network, cloud, and other security platforms.

Skills

Analytical skills

Problem-solving

Independent worker

Team collaboration

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

EDR

SIEM

Vulnerability mgmt

Firewalls

WAF

DLP

IAM

Job description

Senior Security Engineer

WHAT YOU’LL DO:

The Senior Security Engineer will work closely with IT Infrastructure, Cloud, Applications, Data, Service Desk, and Information Security & Compliance teams to implement security controls, investigate security events, remediate vulnerabilities, and improve AAA Washington's overall security posture.

WHO WE ARE:

At AAA Washington, we equip our members with trusted service and expertise to confidently travel through life. We provide our members with best-in-class roadside assistance, discounts and rewards, travel services and insurance. For over 120 years, we’ve served our members, not shareholders, so our growth supports innovation for the Club today and for the future. Seeking to reflect the communities we serve and create an inclusive culture, we encourage employees to bring their full self to work and support applicants from all backgrounds, abilities and walks of life to apply.

WHY YOU’LL LOVE WORKING AT AAA WASHINGTON:

You’ll play an important role in bringing AAA Washington’s spirit of service and peace of mind to our membership. Consistently ranked as one of the Best Places to Work by Puget Sound Business Journal, we aim for work-life balance across the organization. We support hybrid and remote work options for many positions based in our corporate office (Bellevue, Washington) along with some of the best benefits in the region!

ESSENTIAL DUTIES/RESPONSIBILITIES:

Security Engineering & Architecture
Design, implement, and maintain security controls across on-premises, cloud, endpoint, network, application, and identity environments.
Evaluate security architectures and provide recommendations to improve AAA Washington's security posture.
Partner with IT and engineering teams to incorporate security into infrastructure, application, and technology projects.
Develop and maintain secure configuration standards and technical security baselines.
Participate in security architecture and technology reviews for new systems, applications, vendors, and services.
Identify opportunities to automate security controls, monitoring, and response activities.
Security Monitoring & Incident Response
Monitor security alerts and investigate potential security events and incidents.
Participate in incident response activities, including investigation, containment, eradication, and recovery.
Analyze security logs and telemetry from SIEM, EDR, identity, network, cloud, and other security platforms.
Develop and improve detection rules, alerting, and security monitoring capabilities.
Conduct root-cause analysis following significant security events.
Participate in incident response exercises and continuously improve response procedures.
Escalate significant security events in accordance with AAA Washington's incident response procedures.
Collaboration & Communication
Serve as a technical security advisor to IT and business stakeholders.
Explain technical security risks and recommendations in language appropriate for technical and non-technical audiences.
Mentor and provide technical guidance to junior security engineers and analysts.
Promote a culture of security ownership throughout AAA Washington.
Participate in security awareness and education activities when appropriate.
Other duties as assigned

SUPERVISORY RESPONSIBILITIES:

None

MINIMUM QUALIFICATIONS:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
5+ years of experience in information security, cybersecurity, security engineering, infrastructure security, or a related technical discipline.
Demonstrated experience implementing and operating enterprise security technologies.
Strong understanding of network, endpoint, identity, cloud, and infrastructure security principles.
Experience with security monitoring, incident investigation, and vulnerability management.
Experience working with security tools such as EDR, SIEM, vulnerability management, firewalls, WAF, DLP, IAM, or related technologies.
Experience developing security configurations, standards, procedures, and technical documentation.
Ability to troubleshoot complex technical security issues.
Strong analytical and problem-solving skills.
Ability to work independently while collaborating effectively across technical and business teams.

PREFERRED QUALIFICATIONS:

Experience with Microsoft security technologies and the Microsoft security ecosystem.
Experience with Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Intune, and Microsoft Purview.
Experience with cloud security, particularly Microsoft Azure.
Experience with vulnerability management platforms and security scanning.
Experience with identity and privileged access management.
Experience implementing security controls aligned with NIST CSF, ISO 27001, CIS Controls, or similar frameworks.
Experience supporting PCI DSS, SOX, SOC 2, or other compliance requirements.
Experience with scripting or automation using PowerShell, Python, or similar technologies.

CERTIFICATES, LICENSES, REGISTRATIONS:

Security certifications in the following areas, or equivalent experience: