Senior Security Engineer

Job Description

Senior Security Engineer

\n

Charlotte, NC (Onsite) | Full-Time

\n

Own Security for a Platform That Runs Mission-Critical Operations

\n

Our client, a leading enterprise technology company is hiring a Senior Security Engineer to take ownership of security across their cloud infrastructure and application platform. This is a hands-on role for someone who wants real mandate to find problems — and fix them.

\n

What You'll Do

\n

• Own vulnerability management across Azure, AKS, on-prem systems, and client-facing applications — prioritizing by real risk, not CVE counts

\n

• Lead and coordinate penetration testing engagements, including client-facing UAT/production tests; manage testers and vendors through to closure

\n

• Harden identity infrastructure (Entra ID, Auth0) — drive least-privilege access and reduce standing privileged access exposure

\n

• Secure the Kubernetes (AKS) platform and CI/CD pipelines — container images, cluster config, secrets, network policy

\n

• Build security runbooks and incident response procedures; participate in on-call and lead response during active incidents

\n

• Own compliance and audit readiness (SOC 2, GDPR) end-to-end, including auditor coordination and evidence management

\n

• Lead RCAs and remediation plans for client-impacting incidents

\n

• Partner with DevOps/Engineering to embed security into delivery, not gate it

\n

Must-Have Qualifications

\n

• Bachelor's degree or 8–10+ years of IT technical experience

\n

• 8+ years in security analysis, application security, or cloud security, including 2+ years in a senior/lead capacity

\n

• Strong hands-on Azure security experience (Defender for Cloud, Entra ID, network security, key management)

\n

• Working knowledge of Kubernetes/container security (AKS preferred)

\n

• Solid IAM background: RBAC, privileged access, OAuth/OIDC/SSO

\n

• Experience owning SOC 2 and GDPR compliance programs

\n

• Scripting ability (PowerShell, Python)

\n

• Incident response experience, including on-call rotation

\n

• Strong written communication skills — able to turn findings into decisions

\n

Nice to Have

\n

• CISSP, OSCP, GCIH, or Azure Security Engineer Associate certification

\n

• Experience with EU data residency and multi-region deployment security

\n

Why Apply

\n

This role offers real ownership — visible impact, active roadmap, and the authority to drive remediation, not just report findings. Competitive compensation, full benefits, and strong growth trajectory.

\n

Ready to own security for a platform that matters? Apply now.