Senior Security Engineer

Senior Security Engineer

We are looking for a skilled Senior Security Engineer to join our expanding Security Operations team. The perfect candidate will possess a solid background in security technologies, including Tenable, Veracode, SIEM platforms, Gigamon, and Cloudflare. This role is essential in protecting our organization's infrastructure and applications from evolving cyber threats while maintaining a strong security posture.

Key Responsibilities:

• Lead the implementation, configuration, and maintenance of security tools, including Tenable, Veracode, SIEM, Gigamon, and Cloudflare.
• Collaborate with cross-functional teams to enhance vulnerability management processes, ensuring timely identification, prioritization, and remediation of security risks.
• Develop and optimize SIEM use cases, alerts, and dashboards to improve threat detection and incident response.
• Configure and manage Cloudflare security settings to protect web applications and services.
• Conduct security assessments, code reviews, and vulnerability scans to identify and mitigate potential security issues in development and production environments.
• Work closely with IT and development teams to integrate security best practices into the software development lifecycle (SDLC).
• Lead investigations into security incidents, perform root cause analysis, and coordinate response and remediation efforts.
• Provide mentorship and technical leadership to junior security engineers and foster a security-first culture within the organization.
• Stay current with the latest security trends, tools, and threats to continually enhance our security posture and incident response strategies.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 5+ years of experience in information security, focusing on vulnerability management, incident response, and cloud security.
• Hands-on experience with security tools such as Tenable, Veracode, SIEM platforms, Gigamon, and Cloudflare.
• Strong understanding of network security protocols, encryption methods, and best practices in security operations.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Exceptional written and verbal communication skills, enabling clear communication of complex security concepts to both technical and non-technical audiences.
• Relevant certifications (e.g., CISSP, CISM, CISA, GIAC) are highly desirable.

Preferred Qualifications:

• Experience with configuring and managing vulnerability scanning solutions (e.g., Nessus, Qualys).
• Familiarity with web application security best practices and tools such as OWASP, Burp Suite, or AppScan.