Senior IT Security Engineer

IntegraTouch is recruiting for a confidential, rapidly growing technology company seeking a Senior Security Engineer to take ownership of a business-critical function. You will shape the security strategy, implement the technical controls, and help the company confidently expand its client-facing SaaS solutions.

Your decisions will influence how the company builds products, protects information, earns client trust, and supports growth. For a security professional who enjoys turning ideas into working solutions, this is an opportunity to make a visible impact across the business.

Reporting directly to the CTO, you will combine security leadership with hands-on engineering across cloud infrastructure, applications, data, and internal systems. You will have broad responsibility and the opportunity to help define the tools, processes, and capabilities the company needs next.

The Opportunity

We are looking for someone who can connect strategy with execution: establish a policy, configure the supporting technology, investigate a vulnerability, partner with developers on a fix, and demonstrate that the controls work.

You will join a small, collaborative team where initiative matters and your expertise will help guide decisions. Security is your primary responsibility, with opportunities to contribute to automation, technical troubleshooting, security testing, and other engineering priorities.

What You Will Own

• Security strategy and policy: Build and execute a prioritized security roadmap aligned with business growth, client commitments, and risk.
• Compliance and audit readiness: Lead SOC 2 readiness and ongoing examination support, including control implementation, evidence collection, assessor coordination, and remediation.
• Cloud and infrastructure security: Secure AWS environments, networks, servers, databases, endpoints, encryption, secrets, and production access.
• Identity and access management: Implement least privilege, multifactor authentication, single sign-on, role-based access, and controls for service accounts and workload identities.
• Application and API security: Partner with developers to strengthen authentication, authorization, client data isolation, secure integrations, and protection of sensitive information.
• Secure software delivery: Integrate code analysis, dependency scanning, secrets detection, and security checks into CI/CD pipelines.
• Security operations and response: Own vulnerability management, monitoring, incident investigation, technical containment, and recovery.
• Security testing and remediation: Coordinate penetration testing, prioritize findings, and work with engineering to verify fixes.
• Client and vendor assurance: Lead security questionnaire responses, support client assessments, and evaluate third-party security risks.
• Resilience and automation: Strengthen recovery capabilities and automate controls, evidence collection, and recurring operational tasks.
• AI security: Establish practical safeguards for sensitive-data exposure, third-party access, and permissions associated with AI-enabled tools.
• Cross-functional collaboration: Contribute to security-focused QA, release validation, production troubleshooting, and targeted scripting or development.

What You Bring

• Proven hands-on experience in security engineering, cloud security, infrastructure security, or DevSecOps.
• Direct responsibility for implementing, troubleshooting, and operating production security controls.
• Strong AWS security experience across identity and access management, networking, encryption, secrets management, and logging.
• Experience supporting SOC 2 readiness or examinations , including implementing controls, collecting evidence, and resolving findings.
• Working knowledge of SaaS, web application, API, and database security .
• Experience with vulnerability management, penetration test remediation, security monitoring, and incident response.
• Scripting and automation skills using Python, PowerShell, Bash , or a comparable language.
• Familiarity with infrastructure as code and CI/CD workflows.
• Experience translating security frameworks and client requirements into practical technical controls.
• Clear communication, sound judgment, and the ability to explain risks and recommendations to technical and business audiences.
• The initiative to take ownership and the flexibility to contribute within a small, growing team.

Experience That Will Help You Stand Out

• Building or significantly improving a security program within a growing technology or SaaS company.
• A foundation in cloud infrastructure, systems engineering, DevOps, or software development.
• SOC 2 Type II examination support and experience protecting sensitive data in regulated environments.
• Terraform and AWS services such as IAM, KMS, VPC, Secrets Manager, CloudTrail, Config, GuardDuty, and Security Hub.
• C#/ASP.NET Core, SQL Server, and Windows Server. Comparable application security experience in other stacks is welcome; .NET expertise is not required.
• Windows and Apple endpoint security and device management.
• NIST CSF 2.0, OWASP-informed application security, and third-party risk assessments.
• Experience evaluating managed security providers and recommending security tools.
• Relevant certifications such as CISSP, CCSP, CISM, or SSCP. Certifications are valued but not required.

Why Join

• Own a pivotal function: Your work will directly support product delivery, client confidence, and business growth.
• Influence decisions: Work directly with the CTO and contribute your expertise where it matters.
• Build and implement: Combine strategic ownership with substantial hands-on technical work.
• Shape what comes next: Help define the security roadmap, technology investments, external partnerships, and future staffing needs.
• See your impact: Deliver improvements that are visible across the company and its client relationships.

Ready to take ownership of security at a company entering its next stage of growth?

Apply through this posting or contact Wayne Federation at IntegraTouch . Tell us about a security initiative you personally built or improved and the impact it made.