Senior Security Engineer — GRC, AI & Compliance Lead

Prestige Staffing; Georgia; On-site; USD 140,000 - 200,000; Full time

Job summary

Prestige Staffing seeks a Senior Security Engineer, GRC, to own hands-on security engineering and governance for a regulated SaaS platform. You will configure protections, validate tooling, automate evidence collection, and drive SOC 2 and other framework readiness.

This build-and-operate role collaborates with engineering, legal, and product to ensure durable controls, continuous monitoring, and practical security outcomes across cloud, identity, and third‑party risk.

Qualifications

• 8+ years of hands-on security engineering and governance across multiple frameworks.
• Experience configuring and tuning edge and application-layer protections (WAF, bot management, rate limiting, CDN controls).
• Proven ability to independently evaluate, configure, and validate security tooling (SIEM, CSPM).
• Hands-on IAM experience in Azure Entra ID: role design, privileged access, conditional access.
• Experience implementing security controls in Azure per NIST guidelines.
• Proficiency with compliance automation platforms (Vanta/Drata).
• Ownership of SOC 2, NIST 800-53, ISO 27001, FedRAMP, or similar programs.
• Experience with third-party audits and vendor security reviews.
• Strong technical writing and communication skills.

Responsibilities

• Hands-on security engineering: configure and tune edge protections across CDN and API gateways.
• Evaluate and validate security tooling; tune detections and coverage.
• Own SOC 2 audit cycle and expansion into additional frameworks; manage evidence collection.
• Develop and maintain security governance, policies, and control documentation.
• Oversee AI governance program, risk assessment, and vendor intake.
• Partner with Legal on vendor security and third‑party risk; drive remediation and monitoring.
• Maintain incident response runbooks and support IR activities.
• Collaborate with engineering, legal, and product to ensure practical, durable controls.

Skills

Edge protection

WAF tuning

Bot management

DDoS/CDN controls

SIEM tooling

CSPM (Azure)

IAM - Azure Entra ID

Compliance automation

Security governance

Vendor risk management

Tools

Cloudflare

Azure Front Door

Azure API Management

Azure Monitor

Vanta/Drata

SIEM tools

Job description

Prestige Staffing seeks a Senior Security Engineer, GRC, to own hands-on security engineering and governance for a regulated SaaS platform. You will configure protections, validate tooling, automate evidence collection, and drive SOC 2 and other framework readiness.

This build-and-operate role collaborates with engineering, legal, and product to ensure durable controls, continuous monitoring, and practical security outcomes across cloud, identity, and third‑party risk.