Senior Security Engineer

DISQO is building the world’s most trusted ad measurement platform, and they are seeking a Senior Security Engineer to take ownership of their comprehensive security posture. This role involves leading day-to-day security operations, managing AWS cloud and endpoint security, and driving the implementation of Zero Trust principles across their infrastructure.

Responsibilities:

• Own the security posture of our AWS environment: IAM, networking, encryption, KMS, secrets management, and multi-account governance
• Operate AWS-native security services: GuardDuty, Security Hub, Config, IAM Access Analyzer, Macie, Inspector, CloudTrail, and Control Tower
• Design and review secure-by-default patterns for new services. Provide security guidance on Terraform, CloudFormation, and CDK changes
• Drive identity, network, and data perimeter strategy. Reduce blast radius and enforce least privilege across accounts
• Harden container, serverless, and Kubernetes (EKS) workloads where they touch sensitive data
• Run day-to-day SecOps: detection engineering, alert triage, threat hunting, and incident response
• Tune and operate the SIEM, SOAR, and EDR stack (e.g., CrowdStrike). Author and maintain detections as code
• Drive the implementation of Zero Trust principles and manage endpoint security for employee devices, including local admin removal for employees handling customer data
• Lead incident response end-to-end: containment, forensics, root cause, customer comms, and blameless postmortems
• Run vulnerability management and patching cadence; track and drive remediation SLAs
• Build runbooks, on-call playbooks, and tabletop exercises that keep the team sharp
• Use AI coding agents (Claude Code, Cursor, Copilot, or similar) daily to accelerate security engineering work
• Build automations and small services that turn manual security work into repeatable, code-defined workflows
• Apply AI to scale Tier-1 triage, alert enrichment, IR draft communications, and detection content authoring
• Help shape security guardrails for AI tooling and AI-related workloads as they emerge in our stack
• Support SOC 2 Type I/II and similar audits: evidence collection, control mapping, and customer questionnaire response
• Run third-party and vendor security assessments
• Manage security awareness training and the anti-phishing program
• Manage relationships and contracts with security vendors (MSSP, EDR, WAF, vulnerability management, etc.)
• Champion the DevSecOps mindset and foster a security-first culture across engineering teams
• Be the go-to technical reviewer for new product surfaces, infrastructure designs, and data flows
• Partner with Legal and Privacy on regulatory requirements, control implementation, and audit readiness
• Mentor engineers on secure coding, threat modeling, and cloud security best practices

Requirements:

• Experience: 6+ years in cloud security, security operations, or infrastructure security, with hands-on production experience (not policy-only)
• AWS Depth: Strong working knowledge of AWS security: IAM, VPC, KMS, GuardDuty, Security Hub, CloudTrail, Config, and multi-account governance
• Security Operations: Hands-on security incident response experience. You have led real investigations, written postmortems, and tuned detections in a SIEM/SOAR
• Coding Ability: Comfortable scripting and building small services in Python, Go, or similar. You ship automation, not just tickets
• AI-Enabled Workflow: Use AI coding agents (Claude Code, Cursor, Copilot) as part of your default workflow, not as an experiment
• Frameworks: Working knowledge of NIST CSF, CIS Controls, OWASP Top 10, and MITRE ATT&CK
• Experience implementing cloud-native detection and monitoring
• Audit experience: SOC 2, ISO 27001, PCI, or similar
• Hands-on experience with endpoint security, including EDR (e.g., CrowdStrike), local admin removal, and device management/hardening
• Detection engineering and SOAR/automation experience at scale
• IaC security: Terraform, CDK, or CloudFormation, plus CI/CD security gates and policy-as-code (OPA, Cedar)
• Container and Kubernetes (EKS) security
• Multi-cloud exposure (GCP or Azure) in addition to AWS
• Familiarity with AI/LLM security (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF). Useful but not required
• Certifications: AWS Security Specialty, CISSP, CCSP, GCIH, GCIA, GCFA, or OSCP
• Built custom MCP servers, agent frameworks, or in-house security tooling
• Open-source contributions to cloud security or detection engineering tooling