Senior Security Engineer

Insight Global; San Francisco (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

Insight Global is seeking a Senior Security Engineer who builds from the ground up across cloud, data, endpoint, IAM, detection, and incident response in a fast-paced SaaS environment.

The role is fully onsite in either San Francisco or New York, with a strong emphasis on hands-on engineering, coding, and automation to deliver scalable security solutions.

Qualifications

• 7+ years of hands-on Security Engineering experience.
• Strong cloud security foundation across AWS, Azure, and/or GCP.
• Hands-on coding and security automation experience, Python preferred.
• Experience building internal security tools, automation, APIs, integrations, or security platforms.

Responsibilities

• Design, build, and maintain scalable security tooling, automation, APIs, integrations, and internal security capabilities.
• Work across cloud, data, endpoint, IAM, detection, Incident Response, and Security Operations.
• Identify security risks and engineer technical controls to mitigate them.
• Help build and mature Data Security/DLP capabilities.
• Strengthen endpoint security through hardening and defense-in-depth strategies.
• Build detections, monitoring, alerting, and response automation.
• Partner with Engineering teams on secure-by-design architecture and security reviews.
• Secure cloud-native infrastructure across a multi-cloud environment.
• Support Incident Response and engineer preventative controls based on lessons learned.
• Evaluate opportunities to leverage AI and automation across Security Operations.

Skills

Cloud security

Security automation

Python

IAM

Detection engineering

Incident response

Kubernetes

Containers

Infrastructure as code

Terraform

Networking

Security architecture

Threat hunting

Tools

GitHub/OSS projects

Job description

Insight Global is looking for a Senior Security Engineer who's a builder first and can operate across multiple security domains. Strong cloud knowledge is still foundational, but the team already has cloud strength, so we're especially interested in people bringing complementary experience in Data Security/DLP or Endpoint Security. They need to be hands-on with engineering, coding and automation and comfortable jumping into areas like cloud, data, endpoint, IAM, detection and incident response rather than being narrowly specialized. AI Security is a plus and increasingly relevant, but they don't need to be an AI Security expert. We’re looking for a broad, hands-on Security Engineer who builds things, understands cloud deeply, and ideally adds Data Security/DLP or Endpoint expertise. This is an excellent opportunity for a versatile security engineer who enjoys solving complex security problems, building solutions from the ground up, and operating in a fast-paced SaaS environment. This is a fully onsite role in either San Fran. or New York.

Day-to-Day

• Design, build, and maintain scalable security tooling, automation, APIs, integrations, and internal security capabilities
• Work across cloud, data, endpoint, IAM, detection, Incident Response, and Security Operations
• Identify security risks and engineer technical controls to mitigate them
• Help build and mature Data Security/DLP capabilities
• Strengthen endpoint security through hardening and defense-in-depth strategies
• Build detections, monitoring, alerting, and response automation
• Partner with Engineering teams on secure-by-design architecture and security reviews
• Secure cloud-native infrastructure across a multi-cloud environment
• Support Incident Response and engineer preventative controls based on lessons learned
• Evaluate opportunities to leverage AI and automation across Security Operations
• Operate at both a high architectural level and dive deep technically when needed

Must-Haves

• 7+ years of hands-on Security Engineering experience; technical strength matters more than an arbitrary YOE cutoff
• Strong cloud security foundation across AWS, Azure, and/or GCP
• True builder mentality, not primarily security tool administration
• Hands-on coding and security automation experience, Python preferred
• Experience building internal security tools, automation, APIs, integrations, or security platforms
• Ability to work across multiple security domains rather than being narrowly specialized
• Strong understanding of cloud architecture, IAM/identity, networking, and modern security principles
• Working knowledge of Incident Response and/or Detection Engineering
• Deep understanding of Kubernetes, containers, infrastructure-as-code, Terraform, networking, IAM, and cloud architecture.
• Ability to identify security risks and engineer scalable defenses

Plusses

• Data Security / DLP, especially building a DLP program from scratch or maturing an existing program
• Endpoint Security, including endpoint hardening and defense-in-depth
• Detections-as-code, SIEM engineering, threat hunting, and response automation
• AI/LLM Security or experience leveraging AI within security operations
• SaaS Security, IAM (identity and access management), EDR, SSPM, or email security
• GIAC, GCIH, GCFA, CISSP, CCSP, or similar certifications
• GitHub projects, home labs, open-source contributions, or technical side projects
• Highly technical consulting or high-growth SaaS experience