Senior Security Engineer

Job Title: Senior Security Engineer

Location: Onsite-Irvine / Remote

Long term contract

About the Role

We are seeking a highly experienced Senior Security Engineer with a strong background in securing enterprise IT and OT environments. The ideal candidate will have hands-on expertise across Application Security, Vulnerability Management, SOC Operations, Cloud Security, Endpoint Protection, and Identity & Access Management.

You will play a key role in enhancing the organization's security posture through risk-based vulnerability remediation, automation, threat hunting, incident response, and compliance with global standards. This is a hands-on technical role requiring deep knowledge of SIEM/SOAR platforms, EDR tools, cloud-native security, and secure development practices.

Key Responsibilities

• Lead vulnerability management programs using tools like Qualys VMDR, Rapid7 InsightVM, Nessus, and Burp Suite. Prioritize remediation based on risk scores, business impact, and CMDB asset data.
• Manage and optimize endpoint security solutions including EDR (CrowdStrike, Carbon Black, Microsoft Defender), antivirus, and host-based firewalls across Windows, Linux, and RHEL environments.
• Monitor, correlate, and investigate security events using SIEM platforms (Splunk, QRadar, Microsoft Sentinel) and integrate telemetry from cloud services (AWS CloudTrail/GuardDuty/CloudWatch, Azure Security Center/Monitor, Google Cloud Platform Logging).
• Design and implement SOAR workflows (Splunk SOAR, Cortex XSOAR, Sentinel SOAR) for automated incident response, threat containment, and remediation.
• Conduct threat hunting, forensic investigations, root cause analysis, and provide preventive recommendations for endpoint and cloud-related incidents.
• Administer Privileged Access Management (PAM) using CyberArk CorePAS (safes, credential rotation, session monitoring) and Identity & Access Management solutions (SailPoint IdentityIQ, Active Directory, ADFS, MFA, Conditional Access).
• Support Cloud Security posture management across AWS, Azure, and Google Cloud Platform environments, ensuring compliance with relevant frameworks.
• Perform and support Application Security activities including manual/grey-box penetration testing, static code analysis (HP Fortify, IBM AppScan, Checkmarx), secure code reviews, and OWASP Top 10 remediation.
• Ensure adherence to regulatory and industry standards including NIST CSF 2.0, ISO 27001, PCI-DSS, HIPAA, SOX, and NYCRR 500. Assist in internal/external audits and compliance reporting.
• Automate security processes using Python, PowerShell, and Bash for log parsing, vulnerability reporting, SOAR playbooks, and dashboarding.
• Create and maintain security dashboards and reports using Power BI, Tableau, and SIEM tools for stakeholders and leadership.
• Collaborate with Infrastructure, Application Development, SOC, and GRC teams to drive security initiatives, remediate findings, and improve overall security maturity.
• Contribute to continuous improvement by evaluating new security tools, tuning policies, and recommending enhancements to endpoint, cloud, and application security controls.

Required Skills & Competencies

• Endpoint Security: EDR (CrowdStrike, Carbon Black, Defender), Antivirus, Host Firewalls
• Vulnerability Management: Qualys, Nessus, Rapid7 InsightVM, Burp Suite, Patch Management, CMDB integration
• SOC & IR: SIEM (Splunk, QRadar, Sentinel), SOAR (Cortex XSOAR, Splunk SOAR), Threat Hunting
• Identity & Access: CyberArk PAM, SailPoint, Active Directory, ADFS, MFA, Zero Trust principles
• Cloud Security: AWS (GuardDuty, CloudTrail, Config, Security Hub), Azure Security Center, Google Cloud Platform Logging
• Application Security: Penetration Testing, OWASP Top 10, Static Code Analysis (Fortify, Checkmarx, AppScan), Secure SDLC
• Automation & Scripting: Python, PowerShell, Bash
• Compliance: NIST, ISO 27001, PCI-DSS, HIPAA, SOX
• Strong analytical, documentation, and cross-functional collaboration skills

Preferred Certifications

• CISSP (ISC )
• CCSP (ISC )
• CISM
• CompTIA Security+
• Cloud Security certifications (AWS/Azure/Google Cloud Platform Security)
• Any relevant Fortinet, Splunk, or CyberArk certifications

Education

Bachelor s degree in Computer Science, Cybersecurity, or related field (B.Tech preferred)