Sr. Security Engineer

The Davis Companies Inc.; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

The Davis Companies Inc. is seeking a senior cybersecurity engineer with extensive M&A due diligence experience to support post-acquisition integration initiatives.

You will perform security assessments, validate configurations, and translate findings into actionable integration plans for risk-based remediation. The role requires hands-on expertise across endpoint, identity, network, cloud, and infrastructure security, including threat hunting, PKI, email security, and enterprise SIEM.

Qualifications

• Eight years of progressively responsible experience in cybersecurity engineering, security architecture, incident response, and enterprise technology integrations.
• Experience in M&A due diligence or post-acquisition integration activities strongly preferred.
• Deep security engineering across endpoint, identity, network, cloud and infrastructure domains.

Responsibilities

• Conduct security due diligence on acquisition targets and identify technical risks.
• Translate findings into actionable integration plans and risk-based remediation.
• Validate security configurations across endpoints, networks, cloud, and infrastructure.
• Lead collaboration with target-company admins and security personnel during integration.
• Develop Day 1 and Day 100 integration plans and budgets for security controls.
• Validate containment or remediation actions during post-acquisition activities.

Skills

M&A due diligence

Security assessments

Endpoint security engineering

Identity and access management

Threat hunting

SIEM & telemetry

Network security engineering

PKI & certificate management

Email security

Post-acquisition integration planning

Security leadership

Tools

CrowdStrike

Zscaler

Splunk

Wiz

MFA solutions

Zero Trust platforms

Certificate Authorities (CA)

Job description

Extensive M&A cybersecurity due diligence experience, including conducting security assessments of acquisition targets, identifying technical risks, validating security control implementations, and translating findings into actionable integration plans.

Deep security engineering expertise across endpoint, identity, network, cloud, and infrastructure domains, with the ability to independently validate security configurations rather than relying solely on interviews or documented responses.

Advanced endpoint security knowledge, including deployment and administration of EDR, antivirus, disk encryption, device control, MDM, Group Policy, and endpoint hardening technologies across Windows, macOS, and Linux environments.

Hands-on compromise assessment and threat hunting experience, including forensic data collection, telemetry analysis, identification of Indicators of Compromise (IoCs), endpoint triage, and validation of containment or remediation activities.

Strong network and edge security engineering capabilities, including architecture reviews and configuration analysis of firewalls, IDS/IPS, web proxies, SSL/TLS inspection platforms, WAFs, VPNs, ZTNA solutions, Citrix environments, and network segmentation controls.

Expert-level identity and access management knowledge, including SAML, OAuth, federation services, MFA implementation, privileged access controls, conditional access policies, and Zero Trust security architectures.

Practical PKI and certificate management experience, including certificate lifecycle management, internal and external certificate authorities, secrets management, TLS hardening, and identification of legacy protocol risks.

Advanced email security expertise, including secure email gateway technologies, anti-phishing controls, domain authentication standards (SPF, DKIM, DMARC), and cloud email security platforms.

Strong SIEM and security telemetry experience, including log source validation, ingestion sizing, use case assessment, logging coverage review, and forecasting licensing requirements for enterprise security platforms.

Experience gathering and validating infrastructure metrics from enterprise systems, such as Active Directory, cloud environments, CMDBs, endpoint management platforms, vulnerability scanners, and SIEM solutions to support integration planning and budget forecasting.

Working knowledge of leading enterprise security platforms, including CrowdStrike, Zscaler, Splunk, Wiz, Microsoft security technologies, and other modern cybersecurity tooling commonly used during post-acquisition integration efforts.

Demonstrated experience developing Day 1 and Day 100 integration plans, with an understanding of security control rationalization, tooling consolidation, migration sequencing, and risk-based remediation prioritization.

Hands-on remediation experience, including deployment of security agents, implementation of MFA controls, API security improvements, protocol hardening, endpoint policy enforcement, and validation of completed corrective actions.

Strong technical leadership and stakeholder engagement skills, enabling effective collaboration with target-company administrators, infrastructure teams, security personnel, consultants, and acquisition stakeholders while driving technical outcomes.

Ability to translate complex technical findings into executive-level risk and integration recommendations, producing assessment reports, remediation roadmaps, integration runbooks, and budgetary forecasts suitable for both engineering teams and leadership audiences.

A minimum of eight years of progressively responsible experience in cybersecurity engineering, security architecture, incident response, infrastructure security, and enterprise technology integrations, with prior participation in M&A due diligence or post-acquisition integration activities strongly preferred.