Develop scripts, tooling, and infrastructure to automate security controls and workflows
Design and implement automation controls for compliance programs (ISO 27001, ISO 27701, SOC 2, and PCI DSS)
Build and maintain integrations among security, IT, and cloud tools using APIs, webhooks, and SDKs
Own technical delivery for security projects, from design and prototyping through implementation, documentation, and handoff
Create and maintain reusable libraries, scripts, and modules that the security team and IT can use
Design and implement logging and detection content needed to support high-quality investigations
Participate in incident response efforts as a senior technical responder
Architect and improve controls across endpoint, identity, and SaaS environments
Help define and implement baseline security configurations for corporate systems and services
Automate provisioning, hardening, and continuous monitoring in support of the identity lifecycle
Work cross-functionally to translate policies and audit requirements into clear controls

7+ years of experience in information security or software engineering roles (security engineer, platform engineer, or GRC engineer)
Strong familiarity with modern cloud environments (AWS, GCP, or Azure)
Strong coding or scripting skills in at least one language (e.g., Python, Go)
Practical experience with identity and access management
Practical experience with endpoint security and configuration management
Practical experience with logging/SIEM and detection automation
Familiarity with governance, risk, and compliance frameworks (ISO 27001, ISO 27701, SOC 2, or PCI DSS)
Comfortable working with common security and IT tooling (IAM, SIEM, EDR/MDR, ticketing, asset inventory)
Comfortable working in ambiguous, fast-moving environments, prioritizing impact, and driving work to completion in a small team.

Security Engineer

Key skills