Senior Security Engineer

We are looking for a Senior Security Engineer to help build and operate our application and cloud security programs. You'll work hands-on across DevSecOps security tooling, cloud and Kubernetes security, and SIEM operations — partnering with development teams and our SOC to raise the security bar without slowing teams down.

Responsibilities

• Configure and maintain SAST, vulnerability, and container scanning in GitLab CI
• Partner with developers on vulnerability analysis, secure code review, and remediation
• Deploy and maintain security tooling across AWS, Azure, Kubernetes, and Linux VMs
• Monitor cloud security posture and drive remediation of misconfigurations
• Configure and maintain log integrations with Azure Sentinel SIEM
• Collaborate with the SOC on incident detection and response
• Drive vulnerability scanning, triage, and remediation tracking across infrastructure and applications
• Provide reporting for the vulnerability management program

Requirements

• 5+ years of experience with DevSecOps tool integrations in GitLab CI or similar, with working knowledge of Python/Bash
• Experience in vulnerability management, including scanning, triage, remediation tracking, and risk reporting
• Hands-on experience with SIEM platforms such as Azure Sentinel or similar, covering log ingestion and analysis
• Skills in secure code review, including identifying vulnerabilities and insecure patterns and providing actionable remediation guidance
• Hands-on experience with CNAPP/CSPM tools such as Wiz, including findings triage and remediation tracking
• Familiarity with AWS, Azure, Terraform, Kubernetes, and Helm
• English proficiency at B2 level or higher

Nice to have

• Experience in incident response, including detection, investigation, containment, and post-incident review
• Background in security architecture and threat modeling for Kubernetes apps on AWS/Azure
• Experience securing AI workloads and using AI to accelerate defensive workflows
• Knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, NIST 800-53