Senior Security Engineer

Chris Baily; New York (NY); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

On-site in NYC

Competitive salary

Job summary

Chris Baily is seeking a Senior Security Engineer to coordinate with across the company on security processes, tools, and automation. You will work with infrastructure and development teams to deliver secure solutions and drive best-in-class security practices in a rapidly expanding environment.

You will lead incident response, vulnerability detection, and security architecture reviews while leveraging cutting-edge technology to protect production systems in NYC.

Qualifications

• 6+ years in information security infrastructure engineering.
• Strong experience with AWS & Azure security in a multi-account environment.
• Understanding of AWS/Azure native security controls.
• Experience with security tooling (WAF, SIEM, MDR) integration into CI/CD.
• Automation and scripting proficiency (Python).
• Security operations, incident response, and risk assessment expertise.
• Knowledge of industry standards (SOC2, ISO, PCI).
• Security certifications preferred.

Responsibilities

• Tighten and configure AWS and Azure security services across infrastructure.
• Perform cloud security reviews and risk assessments (NACLs, SGs, IAM, S3, KMS).
• Operate security tooling (WAF, SIEM, MDR) and automate tasks.
• Develop automation scripts for security processes.
• Conduct offensive/discovery ops individually or with a team.
• Collaborate with DevOps/Cloud teams to secure infra.
• Oversee vulnerability detection and patch remediation in production.
• Support external/internal penetration testing and remediation efforts.
• Perform security architecture reviews to identify vulnerabilities.

Skills

AWS Security

Azure Security

Automation

Python Scripting

Network Security

CI/CD Security

Incident Response

Security Architecture

Tools

WAF

SIEM

MDR

CI/CD Tools

Azure DevOps

Job description

Job Description

Senior Security Engineer

Full Time Opportunity

5 days on site in NYC, NY

The Senior Security Engineer will be responsible for coordinating with all aspects of the company to assess, design, and implement various security processes, tools, controls, and automation. The role will deliver an engineering and automation focused set of products and services for the company. You will work closely with our infrastructure and development teams to produce innovative and secure solutions. The right person for this role has a strong drive to solve security challenges within a rapidly expanding environment, and the desire to implement best-in-class security measures using cutting edge technology. Additionally, the right person for this position has a strong track record of delivering high-quality, scalable security solutions, infusing transparency into decision making, and partnering across levels and functions with a collaborative lens.

Responsibilities

• Improve security across all aspects of our infrastructure by tightening and configuring relevant Amazon AWS and Microsoft Azure services
• Perform cloud infrastructure security reviews and risk assessment of NACLs, Security Groups, IAM, S3, KMS, and other core AWS infrastructure services
• Implementation and operation of security tooling (WAF, SIEM, MDR, etc.)
• Utilize programming and scripting languages for the purpose of automation
• Conduct lightweight offensive/discovery operations on your own or with a team
• Work with DevOps and Cloud Engineering team to secure infrastructure
• Automate detection of vulnerabilities, evaluate and partner with infrastructure to deploy critical patches/fixes to production systems
• Assist in conducting external and internal penetration testing for our key products and applications to identify critical vulnerabilities and partnered with our engineering team to drive remediation
• Conduct security architecture reviews to identify potential vulnerabilities which may negatively impact the security of our products and software
• Operationalize security incident response and investigative processes

Qualifications

• 6+ years of experience working in a information security infrastructure engineering capacity
• Strong experience with Amazon AWS & Microsoft Azure Security (Logging, Key Management, Detection, and Correction) and automation in a multi-account environment
• Understanding of Amazon Web Services and Azure's native security controls
• Experience with Cisco anti phishing protection, Meraki firewalls, Cisco Client
• Strong network and system security background
• Strong scripting and automation skills (python, etc)
• Strong working knowledge of key management, privilege management and least privilege practices
• Experience with writing RFPs
• Experience with application security, threat modeling, and integrating security tooling (open source or commercial) into a CI/CD pipeline
• Consultative approach towards security with the ability to guide and educate developers on security best practices
• Experience in security operations, incident response and managing security incidents
• Experience with industry standard compliance regulations (SOC2, ISO27XXX, PCI, etc.)
• Security and cloud certification preferred