Senior Security Engineer

Red Cup IT, Inc.; Los Angeles (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Red Cup IT, Inc. is seeking a Senior Security Engineer to spearhead security architecture and strategy amidst evolving cyber threats. This role focuses on Zero Trust principles, cloud sovereignty, and DevSecOps integration. Responsibilities include designing security solutions for multi-cloud environments, leading incident responses, and implementing automated security tools. Candidates should have 5-10+ years of experience in cybersecurity and expertise in Python or Go. A relevant degree and certifications like CISSP or OSCP are preferred.

Qualifications

• 5-10+ years in cybersecurity or high-level systems engineering.
• Strong experience with cloud security solutions and automation.
• Expertise in incident response and digital forensics.

Responsibilities

• Architect end-to-end security solutions for multi-cloud environments.
• Embed automated security scanning in CI/CD pipelines.
• Lead during high-severity security incidents.

Skills

Cloud Security

Engineering with Python, Go, or Rust

Networking knowledge (ZTNA, BGP, SDP)

Expertise in SOAR and XDR platforms

Knowledge of quantum-resistant algorithms

Education

Bachelor's or Master's in Computer Science or Cybersecurity

Tools

Terraform

SIEM

Job description

Role Overview

The role of a Senior Security Engineer in 2026 has evolved from a traditional "firewall gatekeeper" into a strategic architect and automation expert. With the rise of AI-driven threats and the death of the traditional network perimeter, this role now focuses heavily on Zero Trust, Cloud Sovereignty, and DevSecOps integration.

Key Responsibilities

• Security Architecture & Design: Architecting end-to-end security solutions for multi-cloud environments (AWS, Azure, GCP) and hybrid infrastructures.
• Automation & DevSecOps: Embedding automated security scanning (SAST/DAST) into CI/CD pipelines so security is "baked in" rather than "bolted on."
• Incident Leadership: Serving as the technical lead during high-severity security incidents and conducting advanced digital forensics.
• AI Security Governance: Implementing guardrails for internal AI models and defending against AI-powered social engineering and deepfakes.
• Vulnerability Management: Managing complex, risk-based vulnerability programs that prioritize threats based on actual business impact rather than just "high" CVSS scores.
• Compliance & Data Sovereignty: Ensuring technical controls align with evolving global regulations like GDPR, NIST 800-53, and newer cloud sovereignty laws.

Technical Skills & Requirements

• Cloud Security: Identity & Access Management (IAM), Infrastructure as Code (Terraform, Bicep), Cloud-Native SIEM.
• Engineering: Proficiency in Python, Go, or Rust for building custom security tooling and automation.
• Networking: Deep knowledge of Zero Trust Network Access (ZTNA), BGP, and Software-Defined Perimeter (SDP).
• Defensive Ops: Expertise in SOAR (Security Orchestration, Automation, and Response) and XDR platforms.
• Modern Cryptography: Knowledge of quantum-resistant algorithms and digital provenance protocols.

Experience & Certifications

• Years of Experience: Typically 5–10+ years in cybersecurity or high-level systems engineering.
• Education: Bachelor’s or Master’s in Computer Science, Cybersecurity, or a related field.
• Top Certifications:
  • CISSP: Certified Information Systems Security Professional (The industry gold standard).
  • OSCP / OSCE: Offensive Security certifications for deep technical testing skills.
  • CCSP / AWS Certified Security: Specialized cloud security expertise.
  • CASE: Certified Application Security Engineer (Focus on DevSecOps).