Senior Security Engineer - Remote, Lead Strategy

Automatic Data Processing, Inc.; Utah; Hybride; USD 150 000 - 190 000; Plein temps

Résumé du poste

Suralink is seeking a Senior Security Engineer to own our security posture and roadmap. You will bridge risk management and hands-on engineering to safeguard infrastructure, apps, and data in a remote-first, fast-growing SaaS environment.

You will define strategy, manage tooling, and drive compliance (SOC 2 Type II, GDPR), while leading IR/DR planning, cloud hardening, and CI/CD security integrations. Strong collaboration with execs and engineering is required.

Qualifications

• 4+ years in dedicated cybersecurity roles, ideally with experience in scaling startups.
• Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure).
• Experience with modern security tooling (Wiz, Datadog, Elastic, SentinelOne).
• Direct experience leading or heavily contributing to a SOC 2 audit.
• Ability to explain risk to executives and engineering teams.

Responsabilités

• Define the security roadmap and build/maintain annual security strategy, compliance goals, and risk frameworks.
• Vendor and tool management: evaluate, select, and budget security tooling.
• Own or prepare for compliance frameworks (SOC 2 Type II, GDPR).
• Create, test, and maintain IR and DR playbooks.
• Harden cloud environments (AWS/GCP), manage IAM policies, and network security.
• Integrate SAST/DAST into CI/CD and perform code reviews.
• Deploy and manage MDM, MDR, identity providers.
• Monitor logs and investigate security alerts and anomalies.
• Lead vulnerability and patch management programs with risk-based prioritization.
• Run phishing simulations and security awareness training.

Connaissances

Cybersecurity experience

Cloud security

IR/DR planning

Autonomy

Executive risk communication

Formation

AWS Security Specialty

CISSP

OSCP

GCIH

Outils

Wiz

Datadog

Elastic

SentinelOne

Terraform

Kubernetes

Docker

Jamf

Kandji

Intune

Description du poste

Suralink is seeking a Senior Security Engineer to own our security posture and roadmap. You will bridge risk management and hands-on engineering to safeguard infrastructure, apps, and data in a remote-first, fast-growing SaaS environment.

You will define strategy, manage tooling, and drive compliance (SOC 2 Type II, GDPR), while leading IR/DR planning, cloud hardening, and CI/CD security integrations. Strong collaboration with execs and engineering is required.