Senior Security Engineer

SecurityScorecard

6h • $100,000 - $250,000

About The Position

SecurityScorecard is seeking a skilled and motivated Senior Security Engineer to join its growing security team. This hands-on role enhances and maintains the company’s internal security posture and contributes to the security of its products and services. The engineer will apply knowledge across multiple security domains and work effectively in a fast-paced environment.

The role works across corporate and cloud security, application security, identity and access management, incident response, compliance, third-party risk, assessments, and security tooling. It involves collaborating with IT, Engineering, and other teams to integrate security best practices into ongoing operations and new projects, while maintaining documentation and staying current with security threats and industry trends.

Requirements

• At least 6 years of progressive experience in a dedicated cybersecurity role.
• Demonstrated experience with application security principles and practices.
• Direct experience administering and optimizing Okta (IAM), CrowdStrike (EDR), and Wiz (Cloud Security Posture Management).
• Experience with cloud security concepts and best practices, including experience with at least one major cloud provider.
• Hands-on experience with identity management and access control systems.
• Experience participating in incident response processes and procedures.
• Understanding of corporate security principles and their practical application.
• Experience with third-party risk management processes and security assessments.
• Solid understanding of networking fundamentals and security protocols.
• Familiarity with security frameworks and standards such as NIST, ISO 27001, FedRAMP, and StateRAMP.
• Excellent problem-solving skills and ability to work independently and as part of a team.
• Strong written and verbal communication skills.

Nice To Haves

• Experience with security tools and platforms such as identity providers, cloud service providers, cloud security posture management tools, and endpoint detection and response solutions.
• Experience with Google Workspace security features and administration.
• Security certifications such as Security+, CySA+, CEH, or cloud-specific certifications such as AWS Certified Security – Specialty.
• Experience working in a cybersecurity vendor environment.

Responsibilities

• Implement, monitor, and maintain security controls across corporate and cloud environments.
• Participate in the application security program, supporting security testing, vulnerability management, and secure development practices.
• Manage and improve identity and access management (IAM) solutions and processes.
• Contribute to incident response capabilities, including security incident detection, analysis, and remediation.
• Support corporate security initiatives, including security awareness training, policy enforcement, and compliance activities.
• Assist with third-party risk management, including security reviews and assessments of vendors and partners.
• Perform regular security assessments, vulnerability scans, and penetration testing, or coordinate external tests.
• Administer and optimize security tools and technologies.
• Collaborate with IT, Engineering, and other teams to integrate security best practices into operations and new projects.
• Develop and maintain security documentation, procedures, and runbooks.
• Stay current with security threats, vulnerabilities, and industry trends.

Benefits

• Competitive salary, specific to each country.
• Stock options.
• Health benefits.
• Unlimited PTO.
• Parental leave.
• Tuition reimbursements.
• Employees may be eligible for annual performance-based incentive compensation awards and equity.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed