Own end-to-end security operations: monitoring, investigation, and response across AWS, SaaS, and endpoint environments.
Lead incident response from triage to root cause and executive reporting.
Design and refine operational playbooks.
Secure AWS using Wiz and native controls, proactively addressing misconfigurations and identity risks.
Continuously assess cloud posture and drive remediation with Cloud Engineering, embedding secure-by-design principles.
Own the vulnerability management lifecycle (Tenable), translating data into business risk decisions and driving architectural improvements.
Manage and optimize endpoint detection and response (CrowdStrike).
Oversee identity and access control validation, including quarterly reviews and least-privilege enforcement.
Lead phishing simulations and security awareness.
Build automation and response workflows with Torq to accelerate remediation.
Continuously evaluate and optimize the security stack; identify bottlenecks and engineer scalable solutions.
Maintain and mature compliance (ISO 27001, SOC 2, PCI-DSS) using Drata for continuous monitoring and audit readiness.
Conduct control testing (CIS Benchmarks, MITRE ATT&CK).
Support risk assessments and security evaluations.
Act as a security advisor to IT, Engineering, and business leadership, providing risk-informed guidance and helping shape the security program roadmap.

5+ years of progressive experience in Information Security, Cloud Security, or Security Operations.
Strong hands-on experience with modern security tooling, including Splunk, Wiz, Tenable, CrowdStrike, Torq, and Drata.
Proven experience securing AWS and SaaS-based environments.
Experience operating within regulated environments (ISO 27001, SOC 2, PCI-DSS).
Familiarity with CIS Benchmarks, MITRE ATT&CK, and modern security architecture principles.
Ability to independently prioritize, execute, and drive outcomes across multiple domains.
Clear communication skills with the ability to translate technical risk to business stakeholders.
High integrity, strong ownership mindset, and a bias toward action.

Medical, dental, vision, and disability insurance
Flexible Time Off (FTO), 12 company holidays, sick leave and 8-Weeks Paid Parental Leave
Unique professional development benefits with Annual “development dollars” to support our people growth and development
Wellness contests and monthly educational programs
401(K) retirement program

Senior Information Security Engineer

Key skills