Senior Security Engineer - Cloud Security & Tooling Lead

Elsevier; Philadelphia (Philadelphia County); On-site; USD 140,000 - 180,000; Full time

Job summary

Elsevier’s Information Security & Data Protection department seeks a Senior Security Engineer to lead design, build, and operate security tooling at scale. You’ll own architecture decisions for platforms, guide engineers through code and design reviews, and partner with Incident Response, Threat Engineering, and GRC to translate threats into engineering roadmaps.

The role requires deep hands-on cloud security experience, with focus on AWS, Terraform IaC, CI/CD (GitHub Actions), and production

Qualifications

• Hands-on experience in security engineering for cloud-native platforms.
• Experience with AWS multi-account setups and cross-region design.
• Advanced proficiency with Terraform and Infrastructure as Code practices.
• Experience designing CI/CD pipelines for reliability and security.
• Experience with SIEM, EDR, DLP, PAM, WAF, SOAR, and vulnerability management.

Responsibilities

• Lead design, architecture, and delivery of security platforms and services.
• Own IaC standards and CI/CD practices across the team.
• Mentor junior and mid-level engineers.
• Drive integration, tuning, lifecycle management of core security tooling.
• Collaborate with Incident Response, Threat Engineering, and GRC to translate threats into engineering roadmaps.
• Promote AI-assisted engineering practices to improve velocity and quality.
• Lead troubleshooting and root-cause analysis for tooling incidents.
• Represent SENG in architecture reviews and secure-by-default discussions.
• Deliver production-ready systems on time and within budget.

Skills

Security engineering

AWS multi-account

Terraform

CI/CD pipelines

Python scripting

Kubernetes / EKS

AI-assisted engineering tools

Threat modeling / security design

Tools

Terraform

GitHub Actions

Kubernetes / EKS

GitHub Copilot

Claude Code

Job description

Elsevier’s Information Security & Data Protection department seeks a Senior Security Engineer to lead design, build, and operate security tooling at scale. You’ll own architecture decisions for platforms, guide engineers through code and design reviews, and partner with Incident Response, Threat Engineering, and GRC to translate threats into engineering roadmaps.

The role requires deep hands-on cloud security experience, with focus on AWS, Terraform IaC, CI/CD (GitHub Actions), and production