> Markdown version of [/jobs/ext/3702476-security-engineer-new-york-ny](https://www.wearedevelopers.com/jobs/ext/3702476-security-engineer-new-york-ny). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer - New York, NY

- **Company:** NextDeavor, Inc.
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Bash Shell, Software as a Service, Cloud Computing, DDoS Mitigation, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Package Management Systems, Zero Trust Network Access, Security Information and Event Management, Scripting, Containerization, Cloudflare, Build Tools, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 12, 2026
- **Apply:** https://www.careerjet.com/job/us92f568a0ca2f586d5de01d5977f097c4/eaa

## About the Role

* 3-5 years of hands-on security engineering experience, ideally in a software or cloud-native environment
 * Proven track record of implementing security tools and controls (not just scoping or recommending)
 * Solid working knowledge of AWS security services (IAM, SCPs, GuardDuty, Security Hub, CloudTrail)
 * Hands-on experience with Cloudflare (WAF, Zero Trust, DLP) or demonstrated ability to learn quickly
 * Experience deploying and managing endpoint protection (EDR/MDM) across developer and production environments
 * Familiarity with software supply chain concepts (SBOMs, dependency management, artifact signing, SLSA)
 * Experience integrating SAST/SCA/DAST tools into CI/CD pipelines
 * Scripting or light automation skills (Python, Bash, or similar)
 * Ability to work independently, prioritize ruthlessly, and operate without a playbook

Here's What Else Might Help You Out

 * Familiarity with Nix, package management, or reproducible build systems
 * Experience evaluating or managing an outsourced SOC relationship
 * Prior SIEM deployment or detection engineering experience
 * Experience supporting SOC 2 or ISO 27001 audits
 * Security certifications (CISSP, OSCP, AWS Security Specialty, etc.)

## Description

You will establish and operate a pragmatic security program that enables engineering velocity while reducing risk. You'll work directly with engineering leadership and developers to deploy tooling, harden infrastructure, and close gaps end-to-end. This is a hands-on role with real ownership; work model: Hybrid (flexible).
Here's How You'll Make an Impact on the Team

 * Deploy, configure, and maintain detection, monitoring, and response capabilities (SIEM or outsourced SOC) and tune alerting
 * Build and test incident response runbooks and triage workflows, including backup/ransomware recovery checks
 * Harden cloud infrastructure (AWS) posture: IAM, SCPs, security groups, GuardDuty, Security Hub, and automated guardrails
 * Configure and manage Cloudflare across WAF rules, DDoS protection, bot management, Zero Trust access, and DLP policies
 * Implement IaC security scanning (e.g., Checkov, tfsec) in CI/CD pipelines and operate CSPM tooling end-to-end
 * Deploy and manage endpoint protection (EDR/MDM), define endpoint compliance policies, and balance developer friction with security controls
 * Secure build and release pipelines, stand up dependency vulnerability scanning, and own remediation workflows for third-party components
 * Integrate SAST/SCA tooling into developer workflows and participate in threat modeling and security design reviews
 * Audit and rationalize identity and access across cloud, SaaS, and internal tooling; drive SSO consolidation, enforce MFA, and implement least-privilege access
 * Own joiner/mover/leaver entitlement processes and build a lightweight access review cadence