Senior Security Engineer

3 weeks, 3 days ago
Full-time
Senior
Cybersecurity
Wpromote

Wpromote

Wpromote is The Challenger Agency, specializing in digital marketing and customer acquisition that exceeds expectations.

Media
251-1K
Founded 2001

Description

  • Own the design, implementation, and ongoing improvement of the company’s security engineering program.
  • Serve as the senior security escalation point and partner with IT leadership on security decisions.
  • Evaluate, integrate, and rationalize the security tooling portfolio.
  • Design and govern identity and access architecture across Google Workspace and other identity providers.
  • Define and implement cloud security requirements and controls for the GCP environment.
  • Drive phishing-resistant MFA, secrets management, SAML SSO, SCIM provisioning, and session policy across SaaS tools.
  • Own OAuth app governance, token lifecycle management, and third-party application risk management.
  • Lead incident response and forensic investigations, including coordination with external partners during major escalations.
  • Build security automation and detection-as-code practices using version control, peer review, testing, and infrastructure-as-code.
  • Mentor and develop team members on security practices over time.

Requirements

  • 5+ years of hands-on security engineering experience with ownership of security architecture and projects end to end.
  • Detection engineering experience, including building or operating a SIEM, writing and tuning detections, and managing log pipelines, alerting, and monitoring.
  • 4+ years of hands-on cloud security engineering experience; GCP is strongly preferred.
  • Deep identity and access management expertise, including SAML SSO and SCIM provisioning/deprovisioning.
  • Experience with phishing-resistant MFA, secrets management architecture, OAuth governance, token lifecycle, and third-party application risk.
  • Hands-on incident response and forensic methodology experience with sound evidence handling.
  • Endpoint security experience, including EDR operations such as CrowdStrike Falcon or equivalent and device-trust/conditional-access design.
  • Experience running vulnerability or exposure management programs and prioritizing by exploitability, asset criticality, and business risk.
  • Security automation and infrastructure-as-code fluency, including detection-as-code and Terraform.
  • Preferred: background in infrastructure, cloud platform, DevOps, SRE, or systems engineering; certifications such as GCP Professional Cloud Security Engineer, GCIH, GCDA, GDAT, CISSP, or OSCP; scripting in Python or Bash; SOC 2 or similar compliance exposure; experience managing least-privilege access across vendor systems.

Benefits

  • Unlimited PTO.
  • Extended winter holiday break.
  • 100% paid parental leave.
  • 401(k) matching.
  • Medical, dental, vision, life, and pet insurance.
  • Sponsored life insurance.
  • Short-term disability insurance plus additional voluntary insurance.
  • Annual ClassPass credits.
  • Remote work with office hubs in Los Angeles, Chicago, and New York for optional in-person collaboration.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Security Engineer

GoDaddy 5001-10000 Technology, Information and Internet

GoDaddy is hiring a remote Security Engineer in India to help identify security risks and embed secure development practices across products, platforms, cloud environments, and AI-enabled services.

AWS Azure CI/CD Go Java Network Security Penetration Testing Python
1 hour, 24 minutes ago

Senior Cybersecurity Engineer / RMF Specialist

Dark Wolf Solutions 51-250 Internet Software & Services

Dark Wolf Solutions is seeking a Senior Cybersecurity Engineer/RMF Specialist to lead security authorization, risk assessment, and compliance activities for systems supporting sensitive government and critical-infrastructure missions.

Cybersecurity
1 hour, 39 minutes ago

Information Systems Security Manager

Dark Wolf Solutions 51-250 Internet Software & Services

Dark Wolf is seeking an Information System Security Manager to support the Air Force Life Cycle Management Center in obtaining and maintaining an Authority to Operate for a classified cloud environment.

Ansible Azure CrowdStrike Cybersecurity ELK Stack GitHub Splunk Terraform
1 hour, 39 minutes ago

Quantum Computing / Cryptography Engineer

MKS2 Technologies 51-250 Internet Software & Services

MKS2 Technologies is seeking a remote Quantum Computing / Cryptography Engineer to support a federal program by advancing cryptographic modernization, quantum readiness, and post-quantum security migration planning.

C++ Cybersecurity Encryption Java Python
1 day, 1 hour ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers