Senior Security Engineer — Cloud, IR & Compliance

Suralink Inc; Oregon; Hybride; USD 130 000 - 180 000; Plein temps

Avantages offerts par ce poste

Remote-friendly

Medical Insurance

Vision Insurance

Dental Insurance

Flexible PTO

Parental Leave

Dev Budget

Community Involvement

Résumé du poste

Suralink Inc is seeking a Senior Security Engineer to own our security posture and roadmap. You will bridge risk management with hands-on engineering to keep infrastructure, apps, and data secure across a remote-first environment.

Responsibilities include defining security strategy, selecting tools, ensuring SOC 2 Type II and GDPR readiness, and building IR/DR playbooks while securing cloud environments and CI/CD pipelines.

Qualifications

• Experience shaping security strategy and roadmaps.
• Hands-on cloud security across AWS/GCP/Azure.
• Familiar with security tooling and CI/CD integration.
• Experience with SOC 2 audits and GDPR readiness.
• Able to script in Python, Bash, or Go for automation.

Responsabilités

• Define and maintain the security roadmap and risk framework.
• Manage security tooling selection, budget, and integration.
• Lead compliance activities and audit readiness (SOC 2, GDPR).
• Develop and test IR and DR playbooks and drills.
• Secure cloud infrastructure, IAM, and network controls.
• Embed security into CI/CD; conduct code reviews and scans.
• Oversee endpoint security, monitoring, and patch programs.
• Run phishing simulations and security awareness for staff.

Connaissances

Security strategy

Cloud security

CI/CD security

Scripting (Python)

SOC 2 / GDPR

Automation

Risk communication

Formation

Bachelor's in CS/IS

CISSP

Outils

Wiz

Datadog

Elastic

SentinelOne

Description du poste

Suralink Inc is seeking a Senior Security Engineer to own our security posture and roadmap. You will bridge risk management with hands-on engineering to keep infrastructure, apps, and data secure across a remote-first environment.

Responsibilities include defining security strategy, selecting tools, ensuring SOC 2 Type II and GDPR readiness, and building IR/DR playbooks while securing cloud environments and CI/CD pipelines.