Job description

A leading organization is seeking a Senior Security Engineer to design, support, and improve enterprise cybersecurity capabilities. The Senior Security Engineer will provide hands-on technical support across Zero Trust, identity and access management, data protection, endpoint security, cloud identity, and security operations. The position combines security engineering with requirements analysis, technical documentation, implementation coordination, operational troubleshooting, and process improvement.

Responsibilities

• Engineer and support Zero Trust technologies for secure internet and private application access.
• Troubleshoot connectivity, authentication, traffic inspection, application access, and user access issues.
• Evaluate existing security architecture and configurations to identify resiliency, configuration, and operational gaps.
• Support identity and access management initiatives, including identity governance, access reviews, identity lifecycle management, role-based access control, single sign-on, multifactor authentication, and privileged access management.
• Support data discovery, classification, data loss prevention, and access governance capabilities.
• Support endpoint and mobile security, including mobile device management and device compliance.
• Gather and document business, security, functional, and technical requirements.
• Develop architecture documentation, process flows, standard operating procedures, runbooks, and implementation documentation.
• Identify opportunities to automate existing security processes.
• Coordinate security implementations, enhancements, testing, and cross-functional activities.
• Support security operations, audits, control testing, metrics, and remediation efforts.
• Participate in security reviews and incident response activities.

Required experience and skills

• 5+ years of relevant cybersecurity or security engineering experience
• Strong cybersecurity engineering, troubleshooting, and problem-solving capabilities
• Experience with Zero Trust implementation and operational support
• Experience supporting identity and access management and identity governance initiatives
• Experience with Active Directory, Azure AD, ServiceNow, and cloud systems
• Knowledge of Azure and AWS identity and privileged identity management capabilities
• Experience supporting data security, endpoint security, and mobile device security technologies
• Strong requirements gathering, business analysis, and technical documentation skills
• Understanding of security architecture, risk, and regulatory requirements
• Ability to coordinate stakeholders, vendors, technical implementations, and multiple concurrent initiatives
• Understanding of business process design, security integrations, and identity management
• Knowledge of cybersecurity frameworks and industry security requirements, including ISO 27001, NIST CSF, NIST SP 800-53, CIS, CSA CCM, and PCI DSS
• Bachelor’s degree in information systems or a related discipline, or equivalent training
• Security certifications such as CIAM, Microsoft security certifications, OSCP, GCIH, CEH, or similar credentials are desirable

FAQs

1. What does a Senior Security Engineer do?

A Senior Security Engineer designs, implements, and maintains security controls that protect applications, infrastructure, networks, and data. The role combines hands-on security engineering with threat analysis, vulnerability management, incident support, and collaboration with development and infrastructure teams.

2. What areas of security does a Senior Security Engineer typically work on?

Responsibilities may span cloud security, application security, network security, identity and access management, endpoint protection, vulnerability management, and security monitoring. The specific focus depends on the organization's technology environment and security architecture.

3. How does a Senior Security Engineer identify and manage vulnerabilities?

Security engineers use vulnerability scanners, penetration-testing results, code analysis, configuration reviews, threat intelligence, and security assessments to identify weaknesses. They prioritize findings based on factors such as exploitability, business impact, exposure, and affected assets, then coordinate remediation and validation.

4. How does a Senior Security Engineer approach cloud security?

Cloud security involves securing identities, network configurations, workloads, storage, APIs, secrets, and infrastructure while maintaining appropriate access controls. Engineers may work with platforms such as AWS, Azure, or Google Cloud and implement security monitoring, encryption, policy enforcement, and automated compliance checks.

5. What role does identity and access management play in security engineering?

Identity and access management ensures users, applications, and services receive only the permissions required for their responsibilities. Senior Security Engineers may implement or improve authentication, authorization, privileged access, role-based access controls, secrets management, and access reviews.

6. How does a Senior Security Engineer support incident response?

During a security incident, the engineer may analyze alerts, logs, network activity, endpoint data, and affected systems to determine scope and potential impact. They collaborate with incident response teams to contain threats, remove malicious activity, restore secure operations, and implement controls that reduce recurrence.

7. Which security tools are commonly used by Senior Security Engineers?

Security engineers may work with SIEM platforms, endpoint detection and response tools, vulnerability scanners, cloud security tools, firewalls, intrusion detection systems, identity platforms, and security automation frameworks. Tools vary according to the organization's infrastructure and security architecture.

8. How does a Senior Security Engineer incorporate security into software development?

Security engineering may include threat modeling, secure coding guidance, dependency scanning, secrets detection, application testing, security reviews, and automated security checks in CI/CD pipelines. The goal is to identify and address security risks earlier in the software development lifecycle.