Security Engineer

Role overview

Security tooling and engineering

• Own deployment, configuration, testing, monitoring, and maintenance of assigned security tools, which may include SIEM, EDR/CNAPP, DLP, ZTNA, WAF, CASB, secure web gateways, URL filtering, email security, and scanning platforms.
• Lead medium-sized security initiatives end to end, from gathering requirements and selecting an approach through testing, piloting, and implementation.
• Run proof-of-concepts and product evaluations, assess fit against security standards, and recommend decisions.
• Improve owned tools and services, maintain runbooks, resolve operational issues, and document procedures, workflows, architecture diagrams, and playbooks.

Monitoring and incident response

• Independently triage and investigate security events using SIEM, EDR, DLP, WAF, CASB, secure web gateway, and email security tools.
• Judge event severity and decide whether to contain, close, or escalate; promptly escalate high-impact incidents.
• Apply and adapt incident response playbooks, document root causes and lessons learned, and recommend preventive fixes.

Vulnerability management and testing

• Perform secure baseline reviews, infrastructure, endpoint, and application vulnerability scans, penetration-test validation, and AI red-team tests.
• Validate findings, prioritize them by risk, and drive remediation with system owners through closure.
• Escalate critical risks and zero-day vulnerabilities and coordinate mitigation with affected teams.
• Identify automation opportunities in vulnerability workflows and help integrate SAST, DAST, SCA, and External Attack Surface Management into CI/CD pipelines.

Risk, threat modeling, and improvement

• Assess security risks for internal initiatives, product enhancements, vendors, and productivity tools, and provide clear recommendations.
• Perform STRIDE threat modeling for internal projects and AI-enabled tools and produce practical risk mitigations.
• Use working knowledge of Agentic AI concepts and AI security risks to assess AI-related initiatives.
• Complete vendor risk assessments in OneTrust; improve owned processes and controls and share relevant security learnings.

Knowledge, skills and experience

• The provided description states a requirement of 5+ years of experience in Information Security.
• The source description ends during the required qualifications section; further requirements are unavailable.