Senior Security Engineer - Sec Ops

Socket.dev; New York (NY); On-site; USD 95,000 - 158,000; Full time

Job summary

Elsevier's Security Engineering team is seeking a Senior Security Engineer to design, build, and operate security tooling at scale. You will own platform architecture, mentor junior engineers, and partner with Incident Response, Threat Engineering, and GRC to translate threats into engineering roadmaps.

This role emphasizes secure-by-design, secure-by-default practices, AI-assisted tooling, and delivering production-ready systems on schedule.

Qualifications

• Hands-on security engineering for cloud-native platforms at production scale.
• Experience in AWS multi-account environments across regions.
• Advanced Terraform IaC practices; setting standards for a team.
• Designing CI/CD pipelines for reliability and security.
• Broad security tool experience: SIEM, EDR, DLP, PAM, WAF, SOAR, and vulnerability management.
• Mentoring engineers and leading technical design decisions.
• Scripting and software development (Python); production services on Kubernetes/EKS.
• Experience with AI-assisted engineering tools (GitHub Copilot, Claude Code).
• Experience with Agile/DevOps frameworks; improving team delivery practices.

Responsibilities

• Lead design, architecture, and delivery of security platforms and services.
• Evolve Infrastructure as Code standards (Terraform) and CI/CD practices (GitHub Actions).
• Provide technical leadership and mentorship to junior and mid-level engineers.
• Drive integration, tuning, and lifecycle management of core security tooling.
• Collaborate with Incident Response, Threat Engineering, and GRC to map threats to engineering roadmaps.
• Champion AI-assisted engineering to boost velocity and test coverage.
• Lead troubleshooting and RCAs; plan capacity, DR, and runbooks.
• Represent SENG in architecture reviews and secure-by-default practices.
• Deliver production-ready systems on time and within budget.

Skills

Security engineering

Cloud security

Terraform IaC

GitHub Actions

Mentoring engineers

Python development

Kubernetes / EKS

AI-assisted tooling

Agile/DevOps

Tools

Terraform

GitHub Actions

Kubernetes / EKS

SIEM

EDR

DLP

PAM

WAF

SOAR

Claude Code

GitHub Copilot

Job description

Are you a collaborative Sec Ops Engineer looking to work for a mission driven global organization?

About our Team

You'll be joining the Security Engineering team within Elsevier's Information Security & Data Protection department. Our team designs, builds, and operates the security tooling and platforms used across Elsevier Technology, spanning both vendor platforms and team-built services. The team works closely with Incident Response, Threat Engineering, and Governance, Risk & Compliance (GRC), and partners with business and engineering teams to ensure security tooling is effectively adopted across our cloud estate.

About the Role

As a Senior Security Engineer, you help lead in designing, building, and operating security tooling at scale, while raising the technical bar for the wider team. You will own architecture decisions for one or more platforms, guide junior and mid-level engineers through code and design review, and act as a trusted technical voice with Incident Response, Threat Engineering, and GRC. This role suits someone with deep, hands-on cloud security engineering experience who is ready to take ownership beyond individual delivery, shaping how the team builds and operates security tooling

Responsibilities

• Leading the design, architecture, and delivery of security platforms and services.
• Owning and evolve Infrastructure as Code standards (Terraform) and CI/CD practices (GitHub Actions) across the team, ensuring reliable, secure, and repeatable deployments.
• Providing technical leadership and mentorship to junior and mid-level engineers, including design review, code review, and guidance on secure engineering practices.
• Driving integration, tuning, and lifecycle management of core security tooling.
• Partnering with Incident Response, Threat Engineering, and GRC to translate emerging threats, incidents, and compliance requirements into engineering solutions and roadmap priorities.
• Championing adoption of AI-assisted engineering practices (e.g. Claude Code, GitHub Copilot) to improve team velocity, code quality, and test coverage.
• Leading troubleshooting and root-cause analysis for security tooling incidents, and drive resilience improvements through capacity planning, disaster recovery planning, and runbook development.
• Representing SENG in architecture reviews and cross-functional technical forums, advocating for secure-by-design and secure-by-default practices.
• Delivering production-ready systems on time and within budget, and hold the team accountable to engineering and security standards.

Requirements

We recognize that no one will meet every requirement. If you are excited about this role and have relevant experience, we encourage you to apply.

• Significant hands-on experience in security engineering or a related field, including designing and operating cloud-native security platforms at production scale.
• Demonstrated ownership of security architecture in AWS (or OCI/Aliyun), including multi-account environments and cross-region/CN considerations.
• Advanced proficiency with Terraform and Infrastructure as Code practices, with experience setting standards and patterns for a team.
• Experience designing and maintaining CI/CD pipelines (e.g. GitHub Actions) for reliability and security.
• Broad, hands-on experience across security tool categories: SIEM, EDR, DLP, PAM, WAF, SOAR, and vulnerability management,
• Proven track record mentoring engineers and leading technical design decisions within a team.
• Advanced scripting and software development skills (e.g. Python), including experience building and operating production services (APIs, cronjobs) on Kubernetes/EKS.
• Practical experience with AI-assisted engineering tools (e.g. GitHub Copilot, Claude Code, Spec-driven development) and sound judgment on where they add the most value.
• Experience with Agile and/or DevOps frameworks, including driving improvements to team process and delivery practices.

U.S. National Base Pay Range: $78,800 - $131,300. Geographic differentials may apply in some locations to better reflect local market rates.If performed in Maryland, the base pay range is $82,800 - $137,800.If performed in New York, the base pay range is $86,700 - $144,400.If performed in New York City, the base pay range is $94,700 - $157,500.If performed in Rochester, NY, the base pay range is $78,800 - $131,300.If performed in New Jersey, the base pay range is $93,016 - $148,584.This job is eligible for an annual incentive bonus.

We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.

USA Job Seekers:

EEO Know Your Rights.