Own the configuration, tuning, and management of our SIEM solution.
Perform architecture reviews, code reviews, and infrastructure configuration reviews.
Maintain and optimize a vulnerability management CI/CD pipeline within our container/application delivery infrastructure.
Partner with development and infrastructure teams to enforce secure coding practices and remediation strategies.
Build and maintain the frameworks and tooling for enterprise security.
Play a key role in incident response and forensic investigations.
Stay current on the latest threats and provide direct, clear guidance to development teams.

Highly skilled in one or more programming languages (e.g., Ruby, Java, Python, C#, Node.js).
Expertise in managing SIEM solutions with a focus on comprehensive, efficient alerting that reduces "noise."
Strong knowledge of Docker and Kubernetes, with hands-on experience in automated container vulnerability management.
Mastery of SAST, DAST, and IAST tools, with the ability to perform manual validation testing to confirm findings.
Deep knowledge of the OWASP Top 10, Mitre Top 25, and secure coding practices.
Ability to assess complex, ambiguous situations to identify root causes and provide thoughtful input on difficult security topics.
A track record of earning credibility with peers through clear, direct communication and a passion for mentoring others.
Experience working with cloud security concepts and compliance frameworks such as SOC 2 and PCI.

Competitive base pay tied to role and experience, with opportunities for bonuses, commissions, and equity.
Check out our full list at engine.com/culture.

Senior Security Engineer

Key skills