Senior IT Security Engineer

IntegraTouch is recruiting for a confidential technology company seeking a Senior Security Engineer. The role owns security strategy and hands-on engineering across cloud infrastructure, applications, data, and internal systems, supporting the company’s SaaS products and growth.

Responsibilities:

• Security strategy and policy: Build and execute a prioritized security roadmap aligned with business growth, client commitments, and risk
• Compliance and audit readiness: Lead SOC 2 readiness and ongoing examination support, including control implementation, evidence collection, assessor coordination, and remediation
• Cloud and infrastructure security: Secure AWS environments, networks, servers, databases, endpoints, encryption, secrets, and production access
• Identity and access management: Implement least privilege, multifactor authentication, single sign-on, role-based access, and controls for service accounts and workload identities
• Application and API security: Partner with developers to strengthen authentication, authorization, client data isolation, secure integrations, and protection of sensitive information
• Secure software delivery: Integrate code analysis, dependency scanning, secrets detection, and security checks into CI/CD pipelines
• Security operations and response: Own vulnerability management, monitoring, incident investigation, technical containment, and recovery
• Security testing and remediation: Coordinate penetration testing, prioritize findings, and work with engineering to verify fixes
• Client and vendor assurance: Lead security questionnaire responses, support client assessments, and evaluate third-party security risks
• Resilience and automation: Strengthen recovery capabilities and automate controls, evidence collection, and recurring operational tasks
• AI security: Establish practical safeguards for sensitive-data exposure, third-party access, and permissions associated with AI-enabled tools
• Cross-functional collaboration: Contribute to security-focused QA, release validation, production troubleshooting, and targeted scripting or development

Requirements:

• Proven hands-on experience in security engineering, cloud security, infrastructure security, or DevSecOps
• Direct responsibility for implementing, troubleshooting, and operating production security controls
• Strong AWS security experience across identity and access management, networking, encryption, secrets management, and logging
• Experience supporting SOC 2 readiness or examinations , including implementing controls, collecting evidence, and resolving findings
• Working knowledge of SaaS, web application, API, and database security
• Experience with vulnerability management, penetration test remediation, security monitoring, and incident response
• Scripting and automation skills using Python, PowerShell, Bash , or a comparable language
• Familiarity with infrastructure as code and CI/CD workflows
• Experience translating security frameworks and client requirements into practical technical controls
• Clear communication, sound judgment, and the ability to explain risks and recommendations to technical and business audiences
• The initiative to take ownership and the flexibility to contribute within a small, growing team
• Building or significantly improving a security program within a growing technology or SaaS company
• A foundation in cloud infrastructure, systems engineering, DevOps, or software development
• SOC 2 Type II examination support and experience protecting sensitive data in regulated environments
• Terraform and AWS services such as IAM, KMS, VPC, Secrets Manager, CloudTrail, Config, GuardDuty, and Security Hub
• C#/ASP.NET Core, SQL Server, and Windows Server
• Comparable application security experience in other stacks is welcome
• Windows and Apple endpoint security and device management
• NIST CSF 2.0, OWASP-informed application security, and third-party risk assessments
• Experience evaluating managed security providers and recommending security tools
• Relevant certifications such as CISSP, CCSP, CISM, or SSCP