Senior Security Engineer
Posted Updated
Description
- We are seeking a highly skilled Senior Security Engineer to join our advanced Security Operations team
- This role is focused on leading complex incident response and forensic investigations across Windows, macOS, Linux, and AWS environments while helping modernize security operations through automation and AI-driven capabilities
- The ideal candidate is a hands-on security expert with deep AWS security expertise, strong threat detection and digital forensic skills, and experience leveraging AI and machine learning technologies to improve detection, response, and operational efficiency
- You will play a key role in protecting critical assets, conducting high-impact investigations, mentoring team members, and driving the evolution of our security program against sophisticated and emerging threats
- Lead high-priority incident response and forensic investigations, serving as the primary escalation point for advanced analysis, containment, recovery, root cause determination, and executive-level reporting
- Drive threat detection and response across AWS, Windows, macOS, Linux, and endpoint security platforms, leveraging services such as GuardDuty, Security Hub, Detective, CloudTrail, IAM, VPC Flow Logs, and SentinelOne
- Conduct malware analysis, host and cloud forensics, evidence collection, and threat hunting activities to identify attack vectors, persistence mechanisms, and business impact while maintaining sound investigative practices
- Design and implement automated security workflows, AI-assisted playbooks, and AWS-native response capabilities to improve detection accuracy and reduce MTTD and MTTR
- Partner with Security, IT, and DevOps teams to enhance security posture, improve processes and tooling, develop detection content, and mentor junior security engineers
- Strong communication and investigative skills, including technical reporting, executive presentations, and preferred certifications such as AWS Security Specialty, GCIH, GCFA, GCIA, OSCP, or CISSP
- Experience conducting forensic investigations, evidence collection, log analysis, malware triage, and cloud-based incident investigations while maintaining chain-of-custody best practices
- 5+ years of cybersecurity experience, including 2+ years in senior Incident Response, Security Operations, Threat Detection, or Digital Forensics roles
- Strong scripting and automation skills with Python, PowerShell, and/or Bash, including building security automations using AWS services such as Lambda, Step Functions, and EventBridge; experience applying AI and ML technologies to security operations is highly desirable
- Deep expertise securing and investigating AWS environments, including IAM, CloudTrail, Config, CloudWatch, GuardDuty, Security Hub, Detective, VPC Flow Logs, S3 logging, and serverless security controls
- We encourage you to apply even if your experience or skillset doesn’t align perfectly with every requirement. We value a wide range of backgrounds and transferable skills, and we are excited to support learning and growth
- Experience with digital forensics platforms such as AXIOM, F-Response, Timesketch, Volatility, Velociraptor, or other enterprise investigation tools
- Experience with additional EDR/XDR platforms such as CrowdStrike, Microsoft Defender, or Carbon Black
- Expertise building and maintaining SOAR platforms, automated response workflows, and cloud-native security operations
- Experience with AI security technologies including Amazon Bedrock, Microsoft Security Copilot, Google SecOps/Chronicle, or open-source LLM integrations
- Familiarity with multi-account AWS environments, AWS Organizations, CSPM solutions, and cloud security frameworks such as Prowler, Trusted Advisor, or CNAPP platforms
Skills
- AI
- Automation
- AWS
- AWS Bedrock
- Bash
- Cissp
- Cloud
- Cloud Native
- Cloud Security
- CloudTrail
- CloudWatch
- Crowdstrike
- CSPM
- Cybersecurity
- DevOps
- EDR
- Endpoint Security
- Eventbridge
- IAM
- Incident Investigation
- Lambda
- Linux
- LLM
- Machine Learning
- macOS
- Microsoft Defender
- PowerShell
- Python
- S3
- Serverless
- Threat Hunting
- VPC
- XDR