Senior Security Engineer

Manage security tools and systems (SIEM, IDS/IPS, endpoint protection, vulnerability management).

Monitor, analyze, and triage security events, alerts, and logs to identify threats and vulnerabilities.

Perform incident response activities, including containment, eradication, recovery, and documentation.

Investigate and analyze security incidents, determine root cause, and recommend remediation.

Execute incident response playbooks and SOPs.

Triage and manage bug bounty submissions, code scanning results, and vulnerability findings, ensuring remediation and validation.

Collaborate with engineering and product teams to embed “shift left” security practices in the software development lifecycle.

Experience with DevSecOps, DevOps, CICD pipelines, and secure code development.

Assist with internal and external vulnerability scanning, segmentation testing, and penetration testing programs.

Create and maintain security metrics and reporting dashboards for leadership visibility.

Stay current with evolving security threats, vulnerabilities, and industry best practices; recommend enhancements to improve the company’s security posture.

Administer and monitor Identity & Access Management (IAM) systems, enforcing least privilege, segregation of duties, and periodic access reviews.

Develop and maintain policies, procedures, and controls for privileged account management to reduce insider and external risk.