> Markdown version of [/jobs/ext/3605477-security-engineer](https://www.wearedevelopers.com/jobs/ext/3605477-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** CareerCircle
- **Location:** St. Louis, MO, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Excel, Microsoft Windows, Active Directory, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Systems Engineering, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Databases, Information Leak Prevention, Digital Forensics, Disaster Recovery, Domain-Based Message Authentication Reporting and Conformance (DMARC), Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Information Systems Security Architecture Professional, Python (Programming Language), Key Management, Network Security, Open Web Application Security, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Remote Access Technology, Anti-Phishing, Zero Trust Network Access, Runbook, Secure Coding, Security Information and Event Management, Single Sign-On, Software Vulnerability Management, Data Logging, Okta, Cyberark, Large Language Models, Mitre Att&ck, Infrastructure as Code (IaC), Agentic-AI, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Terraform, Security Orchestration, Automation & Response
- **Published:** October 7, 2026
- **Apply:** https://www.careercircle.com/jobs/all/all/usa/mo/saint-louis/5494320c-8d55-4283-93a8-8f1b0f0ed016

## About the Role

CyberArk
Phishing
Terraform
AI Agents
Operations
Leadership
Management
Automation
Mentorship
Governance
Innovation
Resilience
Encryption
Investments
Derivatives
AI Security
AI Adoption
Cryptography
Fixed Income
Due Diligence
Microsoft 365
Cyber Security
Key Management
Cloud Security
Email Security
Self-Motivation
Microsoft Excel
Risk Management
Microsoft Azure
Threat Modeling
Computer Science
Active Directory
Defense In Depth
Network Security
Security Controls
Analytical Skills
Incident Response
Digital Forensics
Disaster Recovery
Windows PowerShell
Financial Services
Security Awareness
Penetration Testing
Root Cause Analysis
Systems Engineering, * Bachelor's degree in computer science, cybersecurity or a related field, or equivalent experience

 * 7+ years of IT or security experience, including 5+ years of hands-on security engineering
 * Hands-on enterprise IAM and PAM engineering (e.g., Entra ID, Okta, CyberArk, BeyondTrust)
 * Hands-on experience securing AWS and/or Azure and engineering SIEM/SOAR and EDR platforms
 * Proficiency in security automation and IaC (e.g., Python, PowerShell, Terraform)
 * Strong command of core security concepts across all domains (least privilege, zero trust, cryptography, network security, risk management, secure development) and frameworks such as NIST CSF, SOC 2 and MITRE ATT&CK
 * Demonstrated mentorship and ability to explain technical risk to nontechnical stakeholders

Preferred

 * AI security, financial services or Microsoft 365 security (Defender, Purview) experience
 * CISSP, CCSP, AWS Security - Specialty, AZ-500, SC-300 or GIAC certification, NISA's culture encourages collaboration and innovation. We seek self-motivated, intellectually curious individuals willing to push themselves and others in an environment that celebrates fresh thinking. We equip employees with the resources needed to excel, and we encourage personal development. NISA is dedicated to internally cultivating and rewarding talent. Employees at NISA are provided with a wide range of benefits, including health, dental, vision and life insurance options, paid time off, a competitive retirement plan, onsite cafeteria, fitness center, a health and wellness program, and an educational assistance program., Terraform
AI Agents
Operations
Leadership
Management
Automation
Mentorship
Governance
Innovation
Resilience
Encryption
Investments
Derivatives
AI Security
AI Adoption
Cryptography
Fixed Income
Due Diligence
Microsoft 365
Cyber Security
Key Management
Cloud Security
Email Security
Self-Motivation
Microsoft Excel
Risk Management
Microsoft Azure
Threat Modeling
Computer Science
Active Directory
Defense In Depth
Network Security
Security Controls
Analytical Skills
Incident Response
Digital Forensics
Disaster Recovery
Windows PowerShell
Financial Services
Security Awareness
Penetration Testing
Root Cause Analysis
Systems Engineering

## Description

GIAC Certifications
Time Off Management
Security Engineering
Single Sign-On (SSO)
Data Loss Prevention
Remote Access Systems
Intellectual Curiosity
MITRE ATT&CK Framework
Artificial Intelligence
Institutional Investing
IT Security Architecture
Vulnerability Management
Public Key Infrastructure
Multi-Factor Authentication
Software As A Service (SaaS)
Infrastructure as Code (IaC)
Privileged Access Management
Python (Programming Language)
Identity And Access Management
Design Elements And Principles
Endpoint Detection And Response
AWS Certified Security Specialty
NIST Cybersecurity Framework (CSF)
Artificial Intelligence Infrastructure
Certified Cloud Security Professional (CCSP)
Open Web Application Security Project (OWASP)
Security Information And Event Management (SIEM)
Certified Information Systems Security Professional, As Senior Security Engineer on NISA's Cybersecurity team within the Technology Operations Group, you are a senior individual contributor who engineers and operates security controls across identity and access management (IAM), privileged access management (PAM), cloud, artificial intelligence (AI), security operations and vulnerability management, partnering with the Deputy CISO and IT engineering.

 * Identity and access management: Engineer and operate identity platforms (Entra ID, Active Directory, SSO), enforcing phishing-resistant multifactor authentication (MFA) and conditional access; automate joiner/mover/leaver and access reviews; govern non-human identities; respond to identity-based threats
 * Privileged access management: Administer the PAM platform (vaulting, rotation, session recording); drive least privilege and just-in-time elevation across servers, databases, network, cloud and SaaS; implement tiered administration; centralize secrets management
 * Cloud security: Enforce AWS and Azure guardrails (landing zones, identity, segmentation, encryption and key management); operate cloud posture and workload protection tooling; embed policy-as-code in infrastructure as code (IaC) and CI/CD pipelines; secure Microsoft 365 and SaaS
 * AI security and governance: Pilot and build guardrails for approved AI tooling and firmwide AI adoption; assess AI systems and vendors for prompt injection, data leakage and excessive agent permissions (NIST AI RMF, OWASP LLM Top 10); enforce least privilege and logging for AI agents; monitor unapproved AI use; use AI-assisted engineering with human review of production-bound output
 * Security operations and incident response: Engineer and tune SIEM/SOAR, endpoint detection and response (EDR) and logging for detections mapped to MITRE ATT&CK; advance automation-first detection and response; lead incident response, forensics and root-cause analysis; maintain playbooks, run tabletop exercises and threat hunt
 * Vulnerability management: Operate scanning across network, container, cloud, application and endpoint environments; prioritize remediation by exploitability and asset criticality; conduct assessments and partner on penetration testing; maintain secure configuration and patch baselines
 * Security architecture and data protection: Apply zero trust, defense-in-depth and secure-by-design principles to new systems; engineer network and email security (segmentation, remote access, DNS filtering, DMARC); support data loss prevention, encryption and PKI; partner on secure development and threat modeling
 * Governance, risk and compliance: Operate controls aligned with NIST CSF, SOC 2 and applicable regulations; support client and vendor due diligence; produce security metrics; maintain policies and standards
 * Resilience and leadership: Support disaster recovery testing and security awareness; mentor junior engineers; maintain runbooks and architecture diagrams; participate in on-call rotation; perform other duties as assigned, GIAC Certifications
Time Off Management
Security Engineering
Single Sign-On (SSO)
Data Loss Prevention
Remote Access Systems
Intellectual Curiosity
MITRE ATT&CK Framework
Artificial Intelligence
Institutional Investing
IT Security Architecture
Vulnerability Management
Public Key Infrastructure
Multi-Factor Authentication
Software As A Service (SaaS)
Infrastructure as Code (IaC)
Privileged Access Management
Python (Programming Language)
Identity And Access Management
Design Elements And Principles
Endpoint Detection And Response
AWS Certified Security Specialty
NIST Cybersecurity Framework (CSF)
Artificial Intelligence Infrastructure
Certified Cloud Security Professional (CCSP)
Open Web Application Security Project (OWASP)
Security Information And Event Management (SIEM)
Certified Information Systems Security Professional
+0
Login | JoinContact