Senior Security Engineer - Cloud & Compliance

• Lead the design and deployment of secure cloud architectures utilizing platforms such as AWS, Azure, and Google Cloud Platform, ensuring compliance with best practices and standards like NIST, FedRAMP, and ISO 27001.
• Conduct comprehensive security risk assessments and vulnerability management processes across cloud and on-premises environments, identifying potential threats and implementing mitigation strategies.
• Develop, implement, and enforce security policies aligned with frameworks such as ISO 27002, COBIT, and the Risk Management Framework (RMF), ensuring consistent adherence across teams.
• Manage security system administration tasks including firewall configuration (Cisco ASA), network segmentation (VLANs), VPN setup, load balancing, and system hardening for operating systems like Debian, CentOS, Ubuntu, Windows, macOS, and Solaris.
• Oversee incident response activities by analyzing security events using SIEM tools like Splunk or SolarWinds; investigate security breaches; coordinate incident recovery efforts; and improve detection capabilities through threat intelligence integration.
• Collaborate with network engineering teams to optimize network support for LAN/WAN infrastructure using routing protocols such as OSPF, BGP, EIGRP; ensure secure network support via IPsec VPNs; and implement IDS/IPS solutions for threat detection.
• Maintain compliance documentation including system security plans (SSPs), audit reports for PCI DSS or FISMA standards; support internal/external audits; ensure continuous improvement of cybersecurity posture through regular assessments.

• Extensive knowledge of computer networking concepts including LAN/WAN architecture, routing protocols (OSPF, BGP), network security principles, and network support tools.
• Proven experience with cloud computing platforms such as AWS, Azure, or Google Cloud Platform; strong understanding of cloud security engineering best practices.
• Proficiency in configuring and managing firewalls (Cisco ASA), VPNs (IPsec), load balancers, SAN/NFS storage solutions; familiarity with virtualization technologies like VMware vSphere or Citrix.
• Deep understanding of information security standards including ISO 27001/27002/27000 series, FIPS compliance requirements, NIST standards (SP 800 series), PCI DSS, FedRAMP frameworks.
• Skilled in cybersecurity tools such as SIEM (Splunk or SolarWinds), vulnerability assessment tools like Nmap or Burp Suite; experience with threat detection & response methodologies.
• Strong background in system administration across multiple operating systems including Linux distributions (Debian, CentOS, Ubuntu), Windows Server environments, macOS; scripting skills in Bash or PowerShell are a plus.
• Knowledge of encryption protocols (PKI/SSL/TLS), identity & access management (LDAP/Active Directory), system hardening techniques (SELinux).
• Ability to perform comprehensive security analysis including vulnerability research/researching exploits; conducting risk management framework assessments; developing system security plans.
• Nice to have: SOC 2, PCI-DSS, SLSA, GovCloud
• Fluent English, written and spoken.
• Availability to work in US Eastern Time hours.

Join us to be at the forefront of cybersecurity innovation! Your expertise will safeguard our cloud infrastructure while shaping our compliance strategy-making a real impact in a fast-paced environment committed to excellence in information security.

Hiring is subject to the pre-employment checks required by the client, within the limits allowed by law.

• Employee discount
• Paid time off
• Parental leave
• Referral program
• Retirement plan