Senior Security & Compliance Engineer

Senior Security & Compliance Engineer

Reporting to the Sr. Manager of Infrastructure, the Senior Security & Compliance Engineer leads the design, implementation, and continuous improvement of our information security program and compliance posture. This role serves as the primary technical resource for security operations, vulnerability management, incident response, audit support, and governance activities within a SOC 2 Type II SaaS environment — bridging technical security engineering with compliance requirements to maintain a strong security posture and meet customer and regulatory expectations.

Key Responsibilities

• Manage security operations and monitoring in concert with MSSPs and VARs
• Lead vulnerability management and remediation programs
• Support incident response, investigation, and recovery efforts
• Administer security tools including SIEM, EDR, email security, vulnerability scanners, and identity platforms
• Develop and maintain security policies, standards, and procedures
• Coordinate audit activities and evidence collection
• Conduct risk assessments and security reviews
• Support customer security questionnaires and due diligence requests
• Monitor compliance with security controls and regulatory requirements
• Partner with infrastructure and application teams to strengthen security posture
• Participate in change management reviews and security assessments

Required Qualifications

• 7+ years of information security experience
• Background in security engineering or security operations
• Experience supporting SOC 2, ISO 27001, or similar compliance frameworks
• Knowledge of vulnerability management, SIEM, endpoint security, and IAM concepts
• Strong written and verbal communication skills

Preferred Qualifications

• CISSP, GSEC, Security+, or equivalent certification
• Experience in SaaS or cloud environments
• Familiarity with customer-facing security assessments and control reviews