Security Engineer

MACOM•Lowell, MA

About The Position

This role owns the "assets." You will protect the company’s critical intellectual property—from the cloud infrastructure hosting it, to the data repositories storing it, to the endpoints accessing it. Operating on a lean, high-impact team, you will spend roughly 80% of your time executing technical security operations and 20% defining the authoritative architectural standards for data protection and threat telemetry.

Requirements

3–5 years of experience spanning cloud infrastructure, data protection, and enterprise endpoint security.
Experience administering enterprise-grade EDR and data visibility platforms (e.g., CrowdStrike, Varonis, or equivalents).
Working knowledge of Cloud environments (AWS/Azure) and Infrastructure-as-Code principles.

Nice To Haves

Basic familiarity with application security concepts and CI/CD pipeline automation (e.g., SAST/DAST, GitLab workflows).

Responsibilities

Manage enterprise Endpoint Detection and Response (EDR) and legacy Data Loss Prevention (DLP) agents, overseeing global tuning and deployment.
Configure Cloud Security Posture Management (CSPM) guardrails across public cloud environments (AWS/Azure).
Administer Data Security Posture Management (DSPM) tools to identify and lock down over-permissioned file shares and repositories.
Act as a high-level security advisor to the DevOps team, providing basic guidance on integrating security scanning into existing CI/CD pipelines.
Define the authoritative tool for insider-threat and UEBA telemetry, tuning down redundant modules in overlapping platforms.
Design the data classification and access guardrails required before the business can safely adopt enterprise AI tools.
Lead the technical strategy for decommissioning legacy endpoint agents and consolidating capabilities.