Sr Security Engineer

We are looking for a highly skilled and experienced Senior Security Engineer to join our growing team. In this role, you will bridge the gap between development, security, and operations to ensure the security of our software through the secure development lifecycle.

You will be responsible for integrating security practices throughout the DevOps lifecycle, building and maintaining secure systems, and automating security processes to enhance our cloud infrastructure and applications.

Key Responsibilities 

1. Secure Architecture:  Under the guidance of the VP of Information Security, maintain a secure cloud architecture and evangelize security best practices within the enterprise that comply with our SOC II policies and procedures.
2. DevSecOps Integration: Collaborate closely with Development, Operations, and Security teams to integrate security practices into the development lifecycle and DevOps processes.
3. Vulnerability Management: Conduct vulnerability assessments, security testing, and advise teams on remediation.
4. Cloud Security: Oversee and enhance the security posture of cloud-based infrastructure (AWS), ensuring secure deployments and configurations.
5. Compliance & Best Practices: Ensure that security controls are aligned with industry standards and best practices (e.g., OWASP, NIST, GDPR) and work toward achieving and maintaining compliance.
6. Incident Response: Be the technical point of contact on security incidents, providing expertise in root cause analysis and remediation.
7. Monitoring & Auditing: Implement monitoring tools to detect and respond to security incidents and audit the security of systems and applications.
8. Security Training & Awareness: Provide guidance and training to other teams on security best practices, secure coding techniques, and threat mitigation strategies.
9. Tooling & Infrastructure: Select, deploy, and manage security tools and frameworks for automated security testing, vulnerability scanning, and threat detection.

Minimum Qualifications

• Minimum 5-7 years of experience in DevOps, Security, or related roles, with at least 2-3 years focused on DevSecOps.
• Proven experience working with CI/CD pipelines, containerization technologies (Docker, Kubernetes), and cloud platforms (AWS).
• Hands-on experience with security tools such as SonarQube, Crowdstrike, Mimecast, and Tenable.
• Strong knowledge of infrastructure-as-code (IaC) tools such as Terraform, CloudFormation, or Ansible.
• Expertise in automation scripting (Python, Bash, or similar languages).
• Experience with version control systems (Git, GitLab, Bitbucket).
• Familiarity with security protocols and standards (OAuth, SSL/TLS, PKI).
• Strong knowledge of network security, firewalls, identity and access management (IAM), and encryption technologies.
• Experience with vulnerability scanning tools and static/dynamic analysis.
• Strong problem-solving and analytical skills.
• Excellent communication and collaboration skills, with the ability to work with cross-functional teams.
• A proactive and continuous improvement mindset.

Nice to Have  

• Security certifications such as CISSP, CISM, or other relevant certifications.
• Experience with threat modeling and risk assessments.
• Familiarity with security frameworks and methodologies (e.g., NIST, OWASP Top 10, SOC 2).
• Knowledge of security in microservices architecture.

Why Join Us?

At Recruitics, you’ll have the opportunity to take full ownership of design within a cutting-edge team focused on leveraging AI and data to transform the recruitment marketing landscape. You’ll be joining a creative and collaborative environment where your work will directly impact our clients’ success and you will have opportunities for career growth, professional development, and continuous learning.

We believe in rewarding great talent with more than just a paycheck. Along with a competitive salary and performance-driven bonuses, we offer a comprehensive benefits package that covers all the essentials: medical, dental, vision, life insurance, and a standout 401k program with company match. Enjoy well-deserved breaks with above-average paid time off, parental leave, and employee support programs. Additionally, we provide two exciting perks: Winter Recess, offering a full week off between Christmas and New Year’s, and Summer Fridays, where you’ll have 6-hour workdays on Fridays during the summer months. Whether you prefer working fully remotely or collaborating in person at our vibrant offices in New York, Chicago, or Atlanta, we’re committed to your well-being and creating a work environment that supports your personal and professional life.

Compensation:

• Base salary range depending on experience and location: $120K - $170K
• Eligible for annual bonus based on performance.