Senior Security Engineer — Elevate Cloud & SaaS Security

IntegraTouch Group; City of Rochester (NY); On-site; USD 150,000 - 230,000; Full time

Job summary

IntegraTouch is seeking a Senior Security Engineer to own a business-critical security function and shape security strategy for client-facing SaaS solutions. You will work with the CTO and development teams to implement robust controls across cloud, applications, data, and internal systems.

Reporting to the CTO, you will lead cloud/infrastructure security, IAM, compliance, and automation initiatives, delivering measurable protections and scalable practices across the org.

Qualifications

• Proven hands-on security engineering experience.
• Experience implementing and operating production security controls.
• Strong AWS security across IAM, networking, encryption, secrets, and logging.
• Experience with SOC 2 readiness/examinations.
• Knowledge of SaaS, web app, API, and database security.
• Experience with vulnerability management, penetration testing remediation, and incident response.
• Scripting with Python/PowerShell/Bash.
• Familiarity with infrastructure as code and CI/CD workflows.
• Ability to translate security requirements into practical controls and communicate risks clearly.
• Ownership mindset in a small, growing team.

Responsibilities

• Build and execute a security roadmap aligned with growth and risk.
• Lead SOC 2 readiness and evidence collection and remediation.
• Secure AWS environments, networks, servers, databases, and secrets management.
• Implement least privilege, MFA, SSO, and RBAC across systems.
• Strengthen app/API security with developers and secure data handling.
• Integrate security checks into CI/CD pipelines and testing.
• Own vulnerability management, monitoring, and incident response.
• Coordinate penetration testing and fix verification with engineers.
• Lead security questionnaires and third-party risk assessments.
• Automate controls, evidence collection, and recurring tasks.
• Establish safeguards for AI-enabled tools and data exposure.
• Collaborate across teams on security QA and release validation.

Skills

Security engineering

AWS security

SOC 2 readiness

SaaS security

Vulnerability management

Scripting (Python/PowerShell/Bash)

CI/CD familiarity

Communication

DevSecOps

Tools

Terraform

CloudTrail

GuardDuty

Security Hub

Job description

IntegraTouch is seeking a Senior Security Engineer to own a business-critical security function and shape security strategy for client-facing SaaS solutions. You will work with the CTO and development teams to implement robust controls across cloud, applications, data, and internal systems.

Reporting to the CTO, you will lead cloud/infrastructure security, IAM, compliance, and automation initiatives, delivering measurable protections and scalable practices across the org.