Sr Security Engineer

The Planet Group; United States; Remote; USD 130,000 - 160,000; Full time

Job summary

The Planet Group is seeking a Senior Security Engineer for a 12-month remote engagement in the United States. The role centers on M&A cybersecurity due diligence, risk assessment, and integration planning across endpoints, identity, networks, cloud, PKI, and email security.

You will lead technical assessments, validate configurations, develop Day 1/Day 100 integration roadmaps, and collaborate with target-company admins and security teams to produce executive risk reports and budget-aligned

Qualifications

• Minimum eight years of progressively responsible cybersecurity experience.
• Experience in M&A due diligence or post-acquisition integration preferred.
• Expertise across endpoint, identity, network, cloud, and infrastructure security.
• Experience with PKI/certificate management and TLS hardening.
• Strong ability to translate technical findings into executive risk discussions.

Responsibilities

• Lead security due diligence assessments for target companies.
• Validate security configurations across endpoints, networks, and cloud.
• Develop Day 1 and Day 100 integration plans and roadmaps.
• Collaborate with target-company admins, security teams, consultants, and stakeholders.
• Produce executive-level risk assessments, remediation roadmaps, and budget inputs.

Skills

M&A cybersecurity due diligence

End-to-end security engineering

Threat hunting

Identity and access management

Zero Trust

PKI management

Tools

CrowdStrike

Zscaler

Splunk

MDM

WAFs/SSL inspection

Job description

Industry: Technology / Workforce Management & HR Software

Location: Remote (US)

Duration: 12 months Contract – W2

Schedule: 8 AM – 5 PM EST

Position Overview

Job Description – Sr Security Engineer

• Extensive M&A cybersecurity due diligence experience, including conducting security assessments of acquisition targets, identifying technical risks, validating security control implementations, and translating findings into actionable integration plans.
• Deep security engineering expertise across endpoint, identity, network, cloud, and infrastructure domains, with the ability to independently validate security configurations rather than relying solely on interviews or documented responses.
• Advanced endpoint security knowledge, including deployment and administration of EDR, antivirus, disk encryption, device control, MDM, Group Policy, and endpoint hardening technologies across Windows, macOS, and Linux environments.
• Hands-on compromise assessment and threat hunting experience, including forensic data collection, telemetry analysis, identification of Indicators of Compromise (IoCs), endpoint triage, and validation of containment or remediation activities.
• Strong network and edge security engineering capabilities, including architecture reviews and configuration analysis of firewalls, IDS/IPS, web proxies, SSL/TLS inspection platforms, WAFs, VPNs, ZTNA solutions, Citrix environments, and network segmentation controls.
• Expert-level identity and access management knowledge, including SAML, OAuth, federation services, MFA implementation, privileged access controls, conditional access policies, and Zero Trust security architectures.
• Practical PKI and certificate management experience, including certificate lifecycle management, internal and external certificate authorities, secrets management, TLS hardening, and identification of legacy protocol risks.
• Advanced email security expertise, including secure email gateway technologies, anti-phishing controls, domain authentication standards (SPF, DKIM, DMARC), and cloud email security platforms.
• Strong SIEM and security telemetry experience, including log source validation, ingestion sizing, use case assessment, logging coverage review, and forecasting licensing requirements for enterprise security platforms.
• Experience gathering and validating infrastructure metrics from enterprise systems, such as Active Directory, cloud environments, CMDBs, endpoint management platforms, vulnerability scanners, and SIEM solutions to support integration planning and budget forecasting.
• Working knowledge of leading enterprise security platforms, including CrowdStrike, Zscaler, Splunk, Wiz, Microsoft security technologies, and other modern cybersecurity tooling commonly used during post-acquisition integration efforts.
• Demonstrated experience developing Day 1 and Day 100 integration plans, with an understanding of security control rationalization, tooling consolidation, migration sequencing, and risk-based remediation prioritization.
• Hands-on remediation experience, including deployment of security agents, implementation of MFA controls, API security improvements, protocol hardening, endpoint policy enforcement, and validation of completed corrective actions.
• Strong technical leadership and stakeholder engagement skills, enabling effective collaboration with target-company administrators, infrastructure teams, security personnel, consultants, and acquisition stakeholders while driving technical outcomes.
• Ability to translate complex technical findings into executive-level risk and integration recommendations, producing assessment reports, remediation roadmaps, integration runbooks, and budgetary forecasts suitable for both engineering teams and leadership audiences.
• A minimum of eight years of progressively responsible experience in cybersecurity engineering, security architecture, incident response, infrastructure security, and enterprise technology integrations, with prior participation in M&A due diligence or post-acquisition integration activities strongly preferred.