Senior Security Engineer

The Senior Security Engineer will be hands-on across multiple domains, including security operations, endpoint protection, cloud security, data loss prevention, compliance, and privacy, while also partnering closely with business and technology teams to ensure that security is embedded across all functions.

This role reports into the head of Security & Privacy and sits within the Technology department. The Technology team manages a modern technology environment built around cloud and SaaS based applications.

• Cloud Security: Support security for AWS and GCP environments, working closely with cloud engineering teams to resolve vulnerabilities
• Endpoint Security: Own the organization’s endpoint security strategy and operations using CrowdStrike, proactively identifying risks, leading investigations, driving remediation efforts, and continuously improving endpoint protections.
• Email Security: Lead the evolution of our email security program by designing advanced detection, DLP, and anti-phishing controls while continuously improving protection against emerging attack techniques
• Security Leadership: Act as the security lead for cross-functional technology initiatives, providing technical guidance and ensuring security is incorporated into architecture, engineering, and operational decisions
• Security Program Development: Design, implement, and continuously mature security processes across incident response, vulnerability management, identity and access management, data protection, and security monitoring
• Cloud Security: Support security for AWS and GCP environments, working closely with cloud engineering teams to resolve vulnerabilities
• Security Tooling: Stay ahead of emerging threats and security trends, recommend and vet new tools as appropriate

• Experience: 5+ years of professional experience in cybersecurity, including experience independently leading security initiatives within cloud-first organizations.
• Technical Skills:
• Strong hands-on experience with Crowdstrike Falcon or similar endpoint security platforms
• Expertise in Google Workspace security administration (Gmail rules, DLP, monitoring)
• Expertise in advanced email security platforms (Sublime, Mimecast, Proofpoint, Abnormal, etc.)
• Expertise with identity access management platforms (Okta)
• Strong understanding of AWS security architecture, IAM, cloud networking, workload protection, and vulnerability management (Wiz experience preferred)
• Experience designing security controls rather than simply administering security tools
• Demonstrated ability to independently drive complex security initiatives from concept through implementation
• Compliance & Privacy: Experience implementing security controls aligned with SOC 2, ISO 27001, FERPA
• Mindset: Meticulous and tenacious in identifying and resolving security risks
• Communication: Excellent written and verbal skills; ability to convey security concepts to both technical and non-technical audiences