Senior Security Engineer

Job Overview:

B&H is seeking a Senior Information Security Engineer to serve as a senior technical resource responsible for the architecture, deployment, operation, resilience, and continuous improvement of enterprise security technologies and controls.

This is a hands-on engineering position with ownership of critical security platforms across network, endpoint, identity, cloud, application, data, and infrastructure environments. The Senior Information Security Engineer will serve as an escalation point for complex engineering issues and collaborate with Security Operations, Incident Response, IT Infrastructure and Operations, DevOps, cloud, and application teams to deliver secure, reliable, and scalable solutions.

The ideal candidate has broad technical security expertise, strong architecture capabilities, and experience owning enterprise security technologies throughout their full lifecycle.

Essential Responsibilities:

• Architect, engineer, deploy, support, and maintain security technologies and controls across network, endpoint, identity, cloud, application, data, and infrastructure environments.
• Serve as the technical owner for assigned security platforms throughout their lifecycle, including evaluation, implementation, integration, configuration, optimization, upgrades, and retirement.
• Design, own, and continuously improve security configurations, engineering standards, procedures, controls, technical documentation, and platform roadmaps.
• Act as a senior technical escalation point for complex security engineering issues, security-tool failures, infrastructure dependencies, and high-impact security incidents.
• Partner with IT, Cloud, DevOps, and application teams to incorporate security into infrastructure design, technology implementations, and the software development lifecycle.
• Provide technical leadership and mentorship to security engineering team members.
• Review technical designs, platform configurations, scripts, automations, integrations, and implementation plans.
• Translate business and technical requirements into secure, scalable, and reliable solutions.
• Own the health, availability, capacity, and performance of enterprise security technologies.
• Lead responses to security-platform outages, conduct root-cause analysis, and drive corrective and preventive actions.
• Lead or co-lead disaster recovery and business continuity planning for security technologies, including backup, restoration, failover, recovery procedures, and testing.
• Develop and support automations for security operations, control compliance, evidence collection, alert enrichment, incident response, and reporting.
• Monitor the evolving threat landscape and translate emerging threats, vulnerabilities, and lessons learned from incidents into improved defensive strategies and controls.
• Drive compliance and audit readiness for security technologies.
• Lead or support the remediation of audit findings, control deficiencies, vulnerabilities, and identified security risks.
• Evaluate, recommend, and implement new security technologies.
• Manage technical vendor relationships, security-platform roadmaps, and tool-effectiveness reviews.
• Serve as a security subject-matter expert on strategic business and technology initiatives.
• Develop and communicate security metrics, KPIs, service-health reporting, and risk updates to management and senior leadership.

Required Knowledge, Skills, and Abilities:

• Expert-level knowledge of network security architecture and Zero Trust principles.
• Expert-level knowledge of authentication protocols, public key infrastructure, certificates, and encryption technologies.
• Advanced knowledge of security technologies across endpoint, network, application, cloud, infrastructure, and data-security domains.
• Advanced proficiency across the enterprise security toolchain, including:
• SIEM and SOAR
• EDR, NDR, and XDR
• Firewalls and web application firewalls
• Packet-capture and network-analysis tools
• Data loss prevention
• Vulnerability-management platforms
• Application-security tools, including SAST and DAST
• Deep working knowledge of security frameworks and standards, including:
• NIST Cybersecurity Framework
• NIST 800-53
• ISO 27001
• CIS Controls
• MITRE ATT&CK
• Strong security engineering and architecture capabilities.
• Ability to lead technical design reviews and translate business requirements into secure technical solutions.
• Experience leading outage response, performing root-cause analysis, and driving post-incident improvements.
• Cloud-security expertise across Microsoft Azure and Microsoft 365, AWS, or Google Cloud Platform.
• Experience with cloud identity, data protection, and secure-configuration management.
• Experience developing or significantly contributing to security programs, technical roadmaps, and security strategies.
• Strong written, verbal, and executive-level communication skills.
• Ability to clearly communicate technical findings and security risks to leadership, auditors, business stakeholders, and technical teams.
• Ability to independently lead complex technical initiatives and collaborate effectively across multiple technology teams.

Education and Experience:

• Six or more years of experience in cybersecurity engineering, infrastructure engineering, security operations, or a related technical field.
• At least three years of experience owning or engineering enterprise security technologies.
• Demonstrated experience managing security platforms through implementation, integration, configuration, optimization, upgrades, troubleshooting, incident response, and retirement.
• Experience owning or significantly contributing to compliance programs under one or more frameworks, such as PCI DSS, SOX, HIPAA, or CMMC.
• Experience participating in audits and leading the remediation of identified gaps and control deficiencies.
• Experience conducting formal risk assessments and communicating findings and risk-acceptance recommendations to management.
• Experience providing technical leadership, mentorship, and senior-level escalation support.

Certifications:

One or more advanced industry certifications are required or strongly preferred, including:

• CISSP
• CISM
• GCIA
• GCIH
• GCFE
• An equivalent advanced security certification

Security+ or CEH may be considered for candidates with equivalent advanced, hands-on experience.

Work Environment:

This is a full-time, onsite position requiring attendance Monday through Friday.

What We Are Looking For:

We are looking for a senior-level, hands-on security engineer who has personally owned and engineered enterprise security technologies. The successful candidate will be comfortable working across multiple security domains, leading complex technical initiatives, resolving difficult platform and infrastructure issues, and continuously improving the organization's security capabilities.

This position requires more than security monitoring or policy development. It is best suited for an engineer with broad technical depth, platform ownership experience, architecture capabilities, operational discipline, automation experience, and the ability to lead through complex engineering challenges.