Senior Information Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Engineer owning KPA’s enterprise security platforms, cloud, identity, and automation. Improving security across workplace-safety software, infrastructure, DevOps, and compliance environments.
Responsibilities:
- Own KPA's enterprise security platforms, including CrowdStrike, Rapid7, Cisco Umbrella, Cisco Duo, KnowBe4, and related technologies
- Lead vulnerability management and remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives
- Lead security incident response, investigations, containment, remediation, and post-incident reviews
- Own the ongoing operation of SOC 2 controls, security audit requirements, and technical compliance initiatives
- Own Cisco Meraki security, VPN infrastructure, network security controls, and secure cloud connectivity
- Secure Azure, AWS, Microsoft 365, Entra ID, AWS Identity Center, Auth0, and cloud-native workloads
- Administer and improve identity governance across Entra ID, Cisco Duo, AWS Identity Center, Auth0, SSO, SCIM, Conditional Access, PIM, privileged accounts, service accounts, and authentication architecture
- Partner with DevOps to integrate security into CI/CD pipelines, Infrastructure as Code, containers, Kubernetes, and cloud workloads, including SAST, DAST, Snyk, and other application security technologies
- Improve cloud security posture management, workload protection, identity controls, logging, alerting, detection engineering, and remediation processes
- Own email security across Microsoft 365, SendGrid, Amazon SES, SPF, DKIM, DMARC, and phishing protection
- Build security automation using PowerShell, Python, Microsoft Graph, REST APIs, and AI-assisted development
- Lead security assessments for vendors, SaaS platforms, cloud services, and third-party integrations; administer third-party vendor management and support vendor risk management
- Administer and improve security awareness programs, policies, standards, and technical procedures
- Support AI security and governance initiatives, including ChatGPT Enterprise, Claude, MCP, and emerging AI technologies
- Support security architecture reviews for new cloud services, platforms, integrations, and technical initiatives
- Identify security gaps, technical debt, and opportunities to improve KPA's security posture through automation, AI, and modern engineering practices
- Serve as the senior technical counterpart to the Director of Security & Technology and senior escalation point for complex security incidents and technical security issues
- Partner with IT Operations and DevOps to embed security into workflows
Requirements:
- 5+ years of experience in security engineering, cloud security, infrastructure security, or a related senior technical role
- Strong knowledge of identity security, endpoint security, vulnerability management, network security, incident response, and zero trust principles
- Experience securing Azure, AWS, Microsoft 365, Entra ID, Windows, and Linux
- Familiarity with CI/CD pipelines, Kubernetes, container security, application security scanning, and DevSecOps practices
- Scripting and automation experience using PowerShell, Python, REST APIs, or similar technologies
- Experience supporting SOC 2 and NIST CSF or comparable security and compliance frameworks
- Relevant certifications such as CompTIA Security+, CISSP, CCSP, AWS Certified Security, or equivalent certifications are preferred
- Excellent communication, documentation, project leadership, and problem-solving skills
- Bachelor's degree in Computer Science, Information Technology or Cybersecurity or equivalent experience
- Full-time, exempt position
Benefits:
- Bonus potential of 10% annually
- Remote work arrangement
- Travel required seldom
- Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions
Similar Jobs
Senior Manager, Global Security Technology
Global Security Technology leader shaping strategy, platforms, and modernization. Managing enterprise security projects, vendors, budgets, and global capability delivery for Johnson & Johnson healthcare operations.
Industry Sales Director – Security, Surveillance & Video Connectivity
Industry Sales Director driving enterprise sales, account expansion, and partner growth for Webbing’s global cellular connectivity platform. Owning the Security & Video vertical worldwide.
Senior Software Engineer, Security
Security engineer building automated application and infrastructure security for Flex’s AI-native private bank. Protecting money movement, cloud access, vulnerability management, and secure development at scale.
Chief Information Security Officer – CISO
CISO leading cybersecurity strategy, operations, risk, and resilience for Sydney Airport’s critical aviation infrastructure. Advising executives and the Board while developing high-performing security teams.
Information Security Program Manager
Information security program manager managing U.S. customer portfolios for Cofense, a phishing defense company. Delivering simulated phishing programs, remediation reporting, and security guidance.
Head of IT, Security
Head of IT and Security owning identity, compliance, IT, and application security. Protecting OpenEd’s education platform and data for over 100,000 students.
Information Security Specialist – SoD Governance, Segregation of Duties
Especialista em segurança da informação governando SoD, IAM e RBAC na Avvale. Mitigação de riscos de acesso e conformidade para soluções empresariais inovadoras e sustentáveis.
Principal Security Engineer
Principal Security Engineer governing Fortive’s multi-cloud, AI, GitHub, and security architecture. Advising executives and leading enterprise technology strategy, governance, security, and modernization.
Security Engineering Lead
Security Engineering Lead building Product Security for Attio’s AI-native CRM. Securing customer data, leading incident response, and hiring the security team.
Security Engineering Lead
Security Engineering Lead building Attio’s Product Security function for its AI-native CRM platform. Leading application security, incident response, and security team growth.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing Omilia’s AWS conversational AI platform. Automating Terraform, GitOps, CI/CD, and cloud compliance across distributed engineering teams.
Consultor Sailpoint ISC – Identity Security Cloud
Consultor SailPoint ISC en Devoteam, consultora europea de estrategia digital y ciberseguridad. Despliegue, integración y evolución de soluciones Cyber IAM para clientes.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems for Euna Solutions, a cloud-based public-sector software provider. Driving AI security, automation, governance, and compliance across the development lifecycle.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems at Euna Solutions, a cloud software provider for public-sector organizations. Driving AI security automation, governance, compliance, and secure development practices.
R&D Cybersecurity Engineer
Sentar cybersecurity engineer supporting DLA research and development efforts. Administering Okta infrastructure, operational systems, networking, automation, maintenance, and user support.
Visiting Professor, Cybersecurity
Online cybersecurity professor teaching undergraduate and graduate students at DeVry University. Developing course materials, assessing learning, and integrating responsible AI and applied security practices.
Principal Information Security Engineer
Principal Information Security Engineer securing ASRC Federal’s DSOP platform for the U.S. Department of Defense. Assessing Kubernetes and containers, managing vulnerabilities, and integrating zero-trust controls across DevSecOps environments.
Cyber Security Engineer
Cyber Security Engineer building automated security capabilities for Interact’s enterprise intranet platform. Improving Splunk, cloud controls, and incident response through engineering and automation.
IT Cybersecurity Auditor
Cybersecurity Auditor conducting risk-based IT, security, and compliance audits for DiXiO, a global SWIFT financial messaging expert network. Assessing controls and reporting findings to clients.
IT Security Engineer
IT Security Engineer safeguarding sensitive healthcare information for Legacy Community Health, a Southeast Texas federally qualified health center. Monitoring threats, assessing risks, and strengthening Microsoft cloud and infrastructure security.