Senior IT Security Engineer

Senior IT Security Engineer

LHH Recruitment Solutions is partnering with an innovative organization seeking a Senior IT Security Engineer to help transform vulnerability and defect management through scalable automation, data engineering, and risk-driven security workflows.

This role is ideal for a security-minded software engineer who enjoys building solutions that eliminate manual processes, improve operational efficiency, and enable security teams to make faster, more informed decisions. You will play a critical role in designing and developing automation frameworks that ingest, enrich, prioritize, and route security findings across a complex enterprise environment.

Working closely with Vulnerability Management, Threat Intelligence, Offensive Security, Cloud Security, and Engineering teams, you will help drive the evolution of security operations from manual analysis toward highly automated, intelligence-driven remediation programs.

Key responsibilities include:

• Architect, develop, and maintain highly scalable automation pipelines that aggregate vulnerability and security findings from multiple sources.
• Integrate data from Attack Surface Management (ASM), External Exposure Management (EEM/EXM), endpoint security platforms, cloud security tools, and other security monitoring sources.
• Normalize, correlate, and enrich security data to create a clear and actionable risk picture across enterprise assets.
• Develop APIs, workflows, and automation services that improve the speed and quality of vulnerability identification and response.

• Design automated gatekeeping, routing, and risk-scoring mechanisms that reduce manual review efforts.
• Build systems that intelligently classify, prioritize, and assign defects based on business and security risk.
• Streamline ticket creation and workflow orchestration across engineering and security teams.
• Improve vulnerability response times through automation and intelligent prioritization.

• Partner with Threat Intelligence and Offensive Security teams to integrate emerging threat indicators into vulnerability prioritization workflows.
• Incorporate risk intelligence such as Common Vulnerability Scoring System (CVSS), Exploit Prediction Scoring System (EPSS), Known Exploited Vulnerabilities (KEV), and adversary activity and threat actor intelligence.
• Automate the population of residual risk tracking systems and security defect ledgers.
• Enable real-time risk awareness to support remediation decision-making.

• Develop automation that accelerates vulnerability remediation at scale.
• Contribute to automated remediation capabilities, including pull request generation, configuration enforcement, security guardrails, and policy-driven corrective actions.
• Collaborate with engineering teams to reduce remediation effort while maintaining security standards.
• Identify opportunities to apply automation and AI-assisted workflows to security operations.

• Build automated controls that enforce organizational vulnerability and security defect management standards.
• Ensure security findings are consistently categorized, prioritized, and attributed.
• Automate validation of remediation requirements and definitions of done.
• Eliminate manual quality assurance steps through policy-driven automation.

• Analyze vulnerability trends, recurring findings, and policy violations to identify root causes.
• Develop dashboards, reporting solutions, and metrics that provide visibility into security posture and remediation performance.
• Engineer preventative controls and automation that reduce incoming defect volume over time.
• Measure the effectiveness of security programs and continuously improve operational maturity.

Required qualifications include:

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Systems, or equivalent practical experience.
• Strong software engineering experience with Python, Go, or similar programming languages.
• Proven experience building automation frameworks, APIs, and distributed workflows.
• Experience integrating systems through RESTful APIs and processing large-scale security data sets.
• Hands-on experience within Vulnerability Management, Security Operations, Attack Surface Management (ASM), Cloud Security Posture Management (CSPM), and Security Risk Management.
• Strong understanding of vulnerability intelligence and exploitability frameworks including CVSS, EPSS, and CISA Known Exploited Vulnerabilities (KEV).
• Experience correlating data from multiple security tools into a centralized risk model.
• Ability to translate manual operational workflows into automated, scalable engineering solutions.
• Strong analytical, problem-solving, and troubleshooting skills.
• Excellent communication skills with the ability to work across technical and non-technical stakeholders.

Preferred qualifications include:

• Experience with cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Familiarity with DevSecOps principles and CI/CD security integration.
• Experience working with endpoint security platforms, vulnerability scanners, and cloud security tools.
• Knowledge of infrastructure-as-code, policy-as-code, or security orchestration platforms.
• Exposure to automated remediation, self-healing systems, or AI-assisted security workflows.
• Experience in large-scale enterprise security environments.

What you'll bring:

• A builder's mindset with a passion for automation and operational excellence.
• The ability to identify inefficiencies and create scalable solutions that eliminate repetitive work.
• A collaborative approach to solving security challenges across multiple teams.
• A balance of software engineering expertise and security domain knowledge.
• A strong focus on measurable outcomes, process improvement, and reducing organizational risk.

Why consider this opportunity?

This position offers the chance to make a significant impact on the future of enterprise security operations by designing automation-first solutions that improve vulnerability management, accelerate remediation, and enhance overall security posture. You will work on complex security challenges while partnering with highly skilled engineers and security professionals in a collaborative, forward-thinking environment.

Benefit offerings include medical, dental, vision, life insurance, short-term disability, additional voluntary benefits, EAP program, and 401K plan. Our program provides employees the flexibility to choose the type of coverage that meets their individual needs. Available paid leave may include Paid Sick Leave, where required by law; any other paid leave required by Federal, State, or local law; and Holiday pay upon meeting eligibility criteria.

Equal Opportunity Employer/Veterans/Disabled. Military connected talent encouraged to apply. To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers
• San Francisco Fair Chance Ordinance

Massachusetts Candidates Only: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.