Implement, own, and champion secure-by-design frameworks across cloud, infrastructure, and application ecosystems.
Review and approve security architecture designs for new internal systems, cloud platforms, and third-party integrations.
Design, enable, and maintain automated security pipelines to proactively scan Git repositories.
Manage security lifecycles within multi-cloud environments (primarily AWS and GCP) to ensure continuous compliance and threat mitigation.
Own and run the end-to-end vulnerability management program, prioritizing remediation efforts.
Assess and secure emerging technologies, evaluating security-focused Large Language Models (LLMs) and AI workflows.
Leverage SIEM platforms (specifically Splunk) to develop advanced dashboards, write queries, and build automated reporting mechanisms for real-time threat intelligence.
Deploy, recommend, and test advanced security controls, including EDR.

5+ years of experience in an information security, security engineering, or infrastructure security role.
2+ years of hands-on experience in DevSecOps, secure software development, or automated CI/CD security pipeline integration.
Strong hands-on technical experience administering enterprise security tools, including SIEM (Splunk), EDR/anti-malware, and vulnerability management systems.
Proven experience securing multi-cloud environments (AWS and/or GCP) and a solid understanding of cloud security posture management.
Practical knowledge of core networking concepts and principles, including securing perimeter devices (such as Cisco hardware).
Demonstrated track record of cross-functional technical communication, documentation, and assisting development teams with security remediation.

Senior IT Security Engineer

Key skills