Senior Security Engineer

encora10; United States; Remote; USD 130,000 - 195,000; Full time

Job summary

Encora is seeking a senior security engineer to own security operations across cloud infrastructure and endpoints. You will implement AWS controls, harden Windows/macOS, and drive vulnerability remediation through monitoring and tooling.

The role emphasizes cross-domain coordination and proactive risk mitigation. The ideal candidate brings hands-on AWS security experience, automation skills with Terraform/Packer, and familiarity with CrowdStrike, Nessus, and Datadog SIEM to strengthen enterprise

Qualifications

• Hands-on AWS security experience across IAM, Organizations, Systems Manager, Lambda and GuardDuty.
• Terraform and infrastructure automation experience; Packer for Windows AMIs.
• Familiarity with FleetDM or osquery and CIS benchmark hardening for Windows/macOS.
• Knowledge of Active Directory, Group Policy, RDP Gateway, LAPS and Entra ID CA/ PIM.
• Experience with vulnerability tools (CrowdStrike Spotlight, Nessus, GitHub Security) and CrowdStrike Falcon administration.
• Experience with Datadog Cloud SIEM and either Cloudflare DLP or web filtering.

Responsibilities

• Manage security operations, vulnerability remediation, endpoint protection, and cloud security initiatives.
• Implement and maintain AWS controls across IAM, Organizations/SCPs, Systems Manager, Lambda, and GuardDuty.
• Harden Windows and macOS systems and manage identity controls and vulnerability findings.
• Monitor security using endpoint tools, SIEM, DLP, and web-filtering solutions.
• Coordinate controls across cloud and endpoint environments and drive remediation to completion.

Skills

AWS security

Security operations

Vulnerability remediation

Terraform

Packer

osquery

CIS hardening

Active Directory

Group Policy

Entra ID CA

PIM

CrowdStrike

Nessus

GitHub Security

Datadog SIEM

Cloudflare DLP

Web filtering

Tools

Terraform

Packer

FleetDM

osquery

CrowdStrike Falcon

Nessus

GitHub Security

Datadog Cloud SIEM

Cloudflare DLP

Job description

Role overview

This senior security engineering role owns security operations and initiatives spanning cloud infrastructure, employee endpoints, identity, and vulnerability remediation. The work includes implementing AWS controls, strengthening Windows and macOS environments, and using security monitoring and endpoint tools to identify and address risk.

Responsibilities

• Manage security operations, vulnerability remediation programs, endpoint protection, and cloud security initiatives.
• Implement and maintain AWS controls across IAM, Organizations and SCPs, Systems Manager, Lambda, and GuardDuty.
• Harden Windows and macOS systems and manage endpoint security, identity controls, and vulnerability findings.
• Monitor and improve security using endpoint, SIEM, DLP, and web-filtering tools.
• Coordinate security controls across cloud and endpoint environments and drive remediation to completion.

Requirements

• Hands-on AWS security experience, including IAM, Organizations/SCPs, Systems Manager, Lambda, and GuardDuty.
• Experience with Terraform and infrastructure automation, plus Packer for building Windows AMIs.
• Familiarity with FleetDM or osquery and CIS benchmark hardening for Windows and macOS.
• Knowledge of Active Directory, Group Policy, RDP Gateway, LAPS, and Entra ID Conditional Access and PIM.
• Experience with vulnerability tools such as CrowdStrike Spotlight, Nessus, and GitHub Security, and administration of CrowdStrike Falcon.
• Experience with Datadog Cloud SIEM and Cloudflare DLP or web filtering.

Nice to have

• Broad experience in cloud security, endpoint management, security operations, and vulnerability management, including security-hardening programs.

Benefits and work setup

• Remote role open to candidates in Costa Rica, Peru, Colombia, or Bolivia.