Senior Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.
Responsibilities:
- Protect the cloud-hosted platform and its underlying infrastructure
- Review and harden the cloud environment and improve security architecture
- Run vulnerability management across cloud workloads, servers, endpoints, containers, and applications, from scanning and risk-based prioritization through remediation
- Threat model AI/ML and LLM-based features and internal AI tools
- Review AI vendors, models, and third-party AI services
- Partner with AI governance to implement approved-use standards, data classification, access controls, and logging
- Support alignment with ISO/IEC 42001, NIST AI RMF, and OWASP Top 10 for LLM Applications
- Design and improve cloud security architecture, including IAM, network segmentation, secrets management, encryption, and tenant isolation
- Review AWS and Azure configurations against CIS Benchmarks and provider best practices
- Use CSPM and configuration monitoring tools for continuous security reviews
- Monitor security advisories and patch-related risks and coordinate response with IT
- Participate in incident response, including triage, investigation, containment, and recovery
- Conduct root-cause analysis and lead post-incident reviews and write-ups
- Build detection and monitoring for platform and AI systems and improve alerting and runbooks
- Track incident trends and report them to IT and operations leadership
- Automate evidence collection, vulnerability triage, alert enrichment, ticketing, and reporting with scripting and AI agents
- Build integrations between security tools and remediation teams
- Evaluate and safely adopt AI-assisted security workflows with guardrails, logging, and human oversight
- Support security controls and evidence for SOC 2, ISO 27001, ENS, and other customer and regulatory requirements
- Contribute to M&A integration and vendor or entity separation work
- Advise Infrastructure, Platform, and IT teams on security
- Report on risk, posture, and progress to IT and operations leadership
Requirements:
- 5+ years in security engineering, cloud security, infrastructure and platform security
- Hands-on experience reviewing and hardening cloud configurations in AWS and/or Azure
- Experience with vulnerability management tools and processes, including scanning, risk-based prioritization, and remediation tracking across cloud workloads, servers, endpoints, and containers
- Experience investigating and documenting security incidents, including root cause analysis and post-incident reviews
- Working knowledge of how LLMs and AI applications are built and deployed, and of their distinct risks (prompt injection, data exfiltration, excessive agency, insecure output handling)
- Strong grounding in secure design, network security, IAM, and cryptography fundamentals
- Scripting or automation skills (Python, Bash, AI agents, etc.)
- Experience with at least one compliance framework (SOC 2, ISO 27001, FedRAMP/GovRAMP, NIST 800-53 or similar)
- Clear communication with both technical and non-technical audiences
- Relevant certifications are nice to have, including CISSP, CCSP, AWS/Azure security, GIAC, or AI-security specialty credentials
- Experience with AI governance or AI risk management is nice to have
- Background in AI/ML red-teaming or adversarial testing is nice to have
- Experience with CSPM, SIEM, or EDR tooling is nice to have
- Familiarity with Windows and Linux server hardening and patch management is nice to have
- Experience supporting government, utility, or other regulated-industry customers is nice to have
Benefits:
- Competitive annual salary
- Private health insurance
- Flexible benefits plan, allowing you to tailor part of your compensation package to your personal needs
- Annual bonus based on individual performance and company results
- Flexible working hours
- Remote work options
Similar Jobs
Senior Strategic Security Advisor
Senior cybersecurity advisor guiding regulated organizations through CMMC, risk, and compliance. CIT delivers managed IT, cybersecurity, cloud, and custom technology solutions.
Senior Security Engineer – Identity & Endpoint
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
Offensive Cybersecurity Engineer – RL Environments for AI Evaluation
Offensive cybersecurity engineers building and hardening reinforcement-learning environments. Evaluating frontier AI models for Terac, a platform connecting vetted experts with AI researchers and labs.
Senior System & Information Security Administrator
Senior administrator owning global servers, networks, security, backups, and end-user support. Coordinating external IT providers for a Bulgaria-based company.
Cybersecurity & Information Assurance Specialist – Federal Health IT
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.
Information Security System Specialist – ATO Lead
ATO Lead preparing VA records application authority-to-operate packages under the Risk Management Framework. Supporting security controls, continuous monitoring, remediation, and Zero Trust governance remotely.
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.
Staff Security Engineer – Enterprise Security
Staff Security Engineer securing ServiceNow’s AI-powered enterprise SaaS platform across cloud, on-premises, and isolated infrastructure. Supporting Protected B workloads and Canadian government compliance.
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.