Senior Security Engineer: Network, SaaS & AI Security

CoStar Group; Virginia (MN); Hybrid; USD 115,000 - 203,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) with match

Tuition reimbursement

Stock purchase plan

Paid time off

Job summary

CoStar Group is seeking a Sr. Security Engineer to advance our enterprise security across network infrastructure, cloud services, SaaS platforms, and AI systems.

The role blends traditional network security with SaaS governance and AI risk management, requiring clear communication to both technical and non-technical audiences. Location is Arlington or Richmond, VA with in-office Mon-Thu and remote on Fridays.

Qualifications

• Bachelor’s Degree required from an accredited university.
• 5+ years of experience in Information Security or Security Engineering.
• One or more industry-recognized certifications (e.g., CISSP, SANS/GIAC, CCNA).
• Strong experience securing AWS networking (NACLs, Security Groups, ALB/NLB, Transit Gateway).
• Hands-on experience with NGFWs, WAFs, load balancers, and enterprise network segmentation.
• Strong scripting or automation skills (Python, PowerShell, or similar).
• Experience with SaaS security platforms, CASB, or SSE tooling.

Responsibilities

• Provide engineering security for on-prem and cloud networks.
• Audit and improve network designs and configurations for security posture.
• Evaluate firewall changes across on-prem and cloud.
• Design and audit policies for NGFW, load balancers, routers, switches, and wireless infra.
• Operate and tune SaaS security tooling and enforce least-privilege access.

Skills

Security engineering

Scripting

Cloud security

Network security

Communication

Education

Bachelor’s Degree

Certifications (CISSP/SANS-GIAC/CCNA)

Tools

NGFWs

WAFs

SaaS security tools

CASB/SSE tooling

Azure DevOps

Terraform

AWS networking

Job description

CoStar Group is seeking a Sr. Security Engineer to advance our enterprise security across network infrastructure, cloud services, SaaS platforms, and AI systems.

The role blends traditional network security with SaaS governance and AI risk management, requiring clear communication to both technical and non-technical audiences. Location is Arlington or Richmond, VA with in-office Mon-Thu and remote on Fridays.