Security Engineer

Allen Media Group•Atlanta, GA

16d•Hybrid

About The Position

The Security Engineer is an individual-contributor role with program ownership across governance, risk, and compliance; cloud, SaaS, and Identity and Access Management security; and security assessments. The role combines hands-on assessment, documentation, evidence production, and configuration work with driving remediation through teams and owners who do not report to this position. The Director owns policy approval, budget, vendor contracts, and executive reporting; this role owns running the programs, closing findings, and keeping evidence ready. The position maintains security policies and standards, operates the risk register and exception governance, maps controls to relevant frameworks, and conducts third-party risk reviews. It also administers identity and privileged access security, secures Google Workspace and other SaaS applications, and operates the Wiz cloud security posture platform across GCP, AWS, and Azure. The Security Engineer plans and executes assessments, coordinates external tests and audits, and manages findings through validation, remediation, retesting, and closure. Clear technical writing, proactive communication, persistent follow-up, and verification of remediation are central to the role. The position reports to the Director, Systems Operations & Cybersecurity and is based in Atlanta with hybrid office expectations. Occasional incident response and after-hours escalation, workload peaks around audit and renewal cycles, and occasional travel to sites or facilities are part of the working conditions.

Requirements

At least 5 years of experience in information security, including demonstrated ownership of a GRC program or a substantial portion of one.
Technical knowledge designing and implementing Identity and Access Management and Privileged Access Management solutions.
Hands-on experience with cloud security posture management, using Wiz or a comparable tool, and practical understanding of cloud identity and misconfiguration risk in at least one major cloud provider.
Administration or security-configuration experience with Google Workspace or a comparable enterprise SaaS suite, including sharing controls, DLP, and OAuth application governance.
Experience running or supporting security assessments, audits, and penetration tests, including evidence production and remediation tracking.
Working knowledge applied in a real environment of at least one control framework: NIST CSF, CIS Controls, SOC 2, or PCI DSS.
Demonstrated ability to drive remediation through teams that do not report to the role.
Strong technical writing; candidates should expect to provide a writing sample.
Bachelor's degree or equivalent practical experience.

Nice To Haves

CISSP, CISA, CCSK, CISM, or a cloud provider security certification.
Experience administering and maintaining security platforms such as Okta, Password Safe, CrowdStrike, Wiz, Palo Alto XSIAM, and ExtraHop.
Scripting experience for evidence collection and reporting automation, using Python, PowerShell, or an equivalent language.
Experience with cyber insurance underwriting questionnaires or M&A technology due diligence.
Experience in media, broadcast, or another 24x7 operational environment.
Familiarity with vulnerability management and endpoint security tooling such as CrowdStrike as a consumer of its output.

Responsibilities

Maintain the security policy and standards library, including drafting, revisions, approvals, publication, and attestation tracking.
Manage the risk register, including intake, scoring, treatment plans, owner assignment, and review cadence.
Map controls to applicable frameworks such as NIST CSF, CIS Controls, SOC 2, and PCI DSS.
Run documented, time-bound exception and risk-acceptance governance, including reviews at expiry.
Own third-party and vendor risk reviews, including pre-contract assessments and periodic reassessments of critical suppliers.
Complete customer and partner security questionnaires and assemble evidence packages for audits, insurers, and M&A due diligence.
Implement, support, and troubleshoot Identity and Access Management and Privileged Access Management solutions.
Administer and maintain identity security platforms and directories, such as Okta and Password Safe.
Design and enforce secure remote access.
Partner with the identity team on SSO coverage and identity lifecycle processes for SaaS access.
Own Google Workspace security configuration, including admin console hardening, context-aware access, 2SV, Drive sharing controls, Gmail threat protection and routing, and DLP policies.
Govern third-party OAuth application access by reviewing, approving, restricting, and periodically re-reviewing access to corporate data.
Monitor Workspace alerts and audit logs; investigate and escalate anomalous access, sharing, and configuration changes.
Inventory sanctioned SaaS applications, review security configuration during onboarding, and identify shadow IT.
Operate the Wiz cloud security posture platform across GCP, AWS, and Azure, including coverage, policy tuning, and triage of misconfigurations, exposed workloads, and toxic combinations.
Route cloud findings to accountable engineering owners with actionable context and track them to closure against defined SLAs.
Review cloud identity configurations, including excessive roles, standing access, unused credentials, and key hygiene.
Contribute cloud security requirements to new architecture and provide secure-by-default baselines.
Partner with network and endpoint security functions on telemetry, logging coverage, and detection gaps.
Plan and execute recurring internal security assessments against the control framework.
Coordinate third-party penetration tests and external audits, including scoping, scheduling, access, evidence, and readouts.
Own findings end to end through validation, owner assignment, remediation tracking, retesting, and closure.
Maintain a consolidated view of open findings across penetration tests, audits, cloud posture, vulnerability scanning, and assessments.
Support security awareness programs and phishing simulations where they intersect with control requirements.
Write policies, findings, risk narratives, and evidence summaries clearly for their intended audiences.
Explain findings in terms of business impact and required action so engineers can act without a meeting.
Keep the Director informed about progress, blockers, escalations, and decisions needed.
Present assessment and compliance status to business-unit stakeholders on a defined cadence.
Drive remediation outcomes, follow up proactively, escalate with recommendations, verify fixes through retesting, keep evidence current, and raise significant findings.