Senior Security Engineer, IAM & Cloud Posture Lead

twentysix; El Segundo (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

twentysix is seeking a security engineering leader in California to own the security tooling stack, IAM design, and cloud posture across GCP environments. You will drive phishing-resistant MFA, secrets management, and SOC 2 aligned controls while coordinating with platform engineering for scalable security outcomes.

You will lead end-to-end investigations, mature the incident response practice, and mentor junior engineers, delivering measurable risk reduction and automation-first security

Qualifications

• 5+ years of hands-on security engineering experience, owning security architecture and projects end to end.
• Detection engineering experience with SIEM, detections, log pipelines, alerts and monitoring.
• 4+ years of hands-on security cloud engineering, GCP preferred, including IAM, policy, governance, audit logging.
• Deep IAM expertise including federation (SAML SSO) and SCIM provisioning/deprovisioning.
• SaaS identity security depth including phishing-resistant MFA, secrets-management, OAuth governance and token lifecycle.
• Hands-on incident response and forensic methodology with evidence handling.
• Endpoint security posture with EDR and device-trust or conditional access.
• Experience with vulnerability management programs and risk prioritization.
• Security automation and IaC fluency (Terraform) beyond ad hoc scripting.

Responsibilities

• Own security tooling portfolio by evaluating, integrating, and rationalizing the tool stack.
• Own Identity and Access Architecture across Google Workspace and other providers.
• Govern cloud security posture across IAM, policy, service accounts and audit logging; partner with platform engineering.
• Advance authentication and secrets management, MFA, SSO, SCIM provisioning, and session policy.
• Own OAuth app vetting, token lifecycle, and third-party risk management.
• Lead incident response and forensics practice, coordinating with partners during escalations.
• Apply security automation and DaC, treat as code, and integrate with Terraform guardrails.
• Develop internal capability through mentoring and cross-team collaboration.

Skills

Security engineering

Incident response

Cloud security

Identity & access management

Threat detection

Security automation

IaC / Terraform

Tools

CrowdStrike Falcon

SIEM

Terraform

Job description

twentysix is seeking a security engineering leader in California to own the security tooling stack, IAM design, and cloud posture across GCP environments. You will drive phishing-resistant MFA, secrets management, and SOC 2 aligned controls while coordinating with platform engineering for scalable security outcomes.

You will lead end-to-end investigations, mature the incident response practice, and mentor junior engineers, delivering measurable risk reduction and automation-first security