Security Engineer

Credo•San Jose, CA

8d•$90,000 - $110,000

About The Position

Credo is seeking a hands-on Security Engineer to join its Security Engineering team. The role helps protect the company’s systems, infrastructure, cloud environments, applications, endpoints, and data. The Security Engineer investigates security alerts and incidents, manages security technologies, assesses vulnerabilities, improves security controls, supports third-party security reviews, and partners with infrastructure, cloud, network, application, and business teams to reduce cybersecurity risk. The successful candidate can independently investigate technical security issues, drive remediation activities, improve security processes, and clearly communicate findings and risks to stakeholders. The position has a base salary range of $90,000–$110,000 per year and is eligible for a discretionary bonus, equity, and medical and other benefits. The base salary offer depends on factors such as education, experience, training, skills, qualifications, and location.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field, or equivalent practical experience.
At least three years of experience in security engineering, security operations, incident response, or vulnerability management.
Hands-on experience investigating security alerts and incidents and analyzing logs from multiple technologies and data sources.
Experience administering or supporting enterprise security tools.
Working knowledge of vulnerability assessment, prioritization, remediation, and validation.
Strong understanding of endpoint, network, identity, email, cloud, application, and data-security principles.
Knowledge of Windows and Linux/Unix, TCP/IP, DNS, VPNs, firewalls, and least privilege.
Scripting or automation skills in Python, PowerShell, or Bash.
Strong documentation and problem-solving abilities.
Ability to communicate risks to technical and non-technical stakeholders.

Nice To Haves

Experience with Rapid7, Tenable, CrowdStrike or Microsoft Defender, Palo Alto Networks Prisma/Strata, or Proofpoint.
Familiarity with Microsoft 365 security, cloud-security tooling across AWS, Azure, or GCP, and DLP or data-security platforms.
Exposure to PAM and password vaults, PKI, application control, micro-segmentation, and virtualization technologies.
Experience with security orchestration, workflow automation, and ticketing or remediation tracking such as Jira.
Certifications such as Security+, CySA+, GCIH, GCIA, AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer, or CISSP/Associate of ISC2.

Responsibilities

Protect company systems, infrastructure, cloud environments, applications, endpoints, and data.
Investigate security alerts and incidents and analyze logs from multiple technologies and data sources.
Administer or support enterprise security tools.
Assess vulnerabilities, prioritize and drive remediation, and validate fixes.
Improve security controls and processes.
Support third-party security reviews.
Partner with infrastructure, cloud, network, application, and business teams to reduce cybersecurity risk.
Communicate security findings and risks to technical and non-technical stakeholders.