Senior Security Engineer

Colossus Technologies Group is hiring a Senior Security Engineer to help build and scale a broad security program across corporate systems, cloud environments, identity, endpoints, applications, and AI-enabled workflows. The role will manage vulnerability remediation, security reviews, compliance automation, endpoint security, incident support, and security engineering projects.

Responsibilities:

• Help build, maintain, and scale security practices across corporate systems, cloud environments, identity, endpoints, applications, and internal tooling
• Administer and improve SaaS access, employee onboarding and offboarding, access reviews, identity workflows, and device-management processes
• Partner with engineers and internal stakeholders to identify practical security solutions that support business and product goals
• Manage vulnerability-remediation efforts across endpoints, cloud infrastructure, and internal applications
• Support security reviews for internal tools, systems, integrations, and new technical initiatives
• Improve audit readiness by automating evidence collection, monitoring controls, and addressing infrastructure-level compliance findings
• Contribute to endpoint security and corporate-fleet management, including EDR, device controls, and security monitoring
• Help establish secure, responsible practices for using AI tools and AI-enabled workflows throughout the organization
• Triage security requests, support incident investigations, and help drive new security engineering projects from idea through implementation
• Automate repeatable security and compliance processes to help the security function scale efficiently

Requirements:

• 5+ years of professional experience in security engineering, cloud security, corporate/enterprise security, security operations, DevOps, SRE, application security, or a similar technical security role
• Demonstrable programming or automation experience through professional work, technical projects, or a Computer Science-related background
• Experience with one or more programming languages such as Python, TypeScript, Node.js, Go, or C#
• Strong experience in at least two of the following areas: cloud security, enterprise security, identity and access management, application security, vulnerability management, security operations, incident response, or compliance
• Experience with cloud platforms such as AWS or GCP
• Ability to work independently, prioritize effectively, and make practical security decisions in a fast-paced, high-ownership environment
• Strong written and verbal communication skills, with the ability to work effectively with engineers, auditors, and business stakeholders
• Experience with infrastructure-as-code tools such as Terraform or CDK
• Experience supporting SSO, access lifecycle management, SaaS administration, device management, or endpoint-security tooling
• Familiarity with tools such as Google Workspace, CrowdStrike, SentinelOne, Jamf, NinjaOne, Intune, Vanta, Drata, or similar technologies
• Experience securing cloud workloads, managing IAM controls, supporting CI/CD environments, or working in a DevOps/SRE capacity
• Exposure to SOC 2, ISO 27001, HIPAA, audit preparation, compliance automation, or evidence collection
• Experience with security investigations, incident response, detection engineering, or vulnerability-management programs
• Familiarity with AI security, AI governance, securing AI workloads, building internal AI guardrails, or automating workflows using AI tools