Senior Security Engineer

Virtual Technologies Group•Maumee, OH

3d•Remote

About The Position

Virtual Technologies Group is seeking a Senior Security Engineer to serve as a strategic lead in a staff augmentation model. You will be responsible for maturing a modern security stack centered on AWS/Azure, Rapid7, and Proofpoint, transitioning the environment from reactive triage to proactive architecture. This remote-eligible role requires a blend of hands-on technical automation and high-level mentorship to elevate existing security operations and ensure robust governance across a diverse cloud infrastructure. Virtual Technologies Group is a leading innovator in the technology sector, specializing in the development and implementation of advanced virtual solutions. Our mission is to empower businesses with cutting-edge technology that enhances efficiency, productivity, and connectivity. With a team of highly skilled professionals, we deliver customized solutions tailored to meet the unique needs of our clients across various industries. Our commitment to excellence, innovation, and customer satisfaction drives us to continuously push the boundaries of what is possible. At Virtual Technologies Group, we are dedicated to shaping the future of technology and making a positive impact on the world.

Requirements

5+ years of experience in Security Engineering, with at least 3 years specifically focused on Cloud Security (AWS or Azure).
Foundational knowledge of cloud infrastructure (VPC/VNet, Security Groups, S3/Blob storage) and Identity & Access Management (IAM).
2+ years of hands-on experience managing a SIEM or XDR platform (e.g., Rapid7, Splunk, or Sentinel) including log onboarding and basic tuning.
Proven ability to manage vulnerability scans, prioritize risks based on business impact, and coordinate remediation with IT/Infrastructure teams.
Experience participating in a formal IR process, from initial detection through to containment and post-incident reporting.
Basic understanding of regulatory frameworks such as SOX or PCI-DSS and their application in technical environments.
Ability to mentor junior staff and translate complex technical security risks into actionable tasks for non-security peers.

Nice To Haves

Direct experience with Proofpoint (specifically TAP, TRAP, and IMD) for automated email threat orchestration.
Proven track record of building custom detection rules and "tuning out the noise" in Rapid7 InsightIDR.
Proficiency in Python or PowerShell to automate repetitive security tasks or integrate tools via APIs.
Hands-on experience with Microsoft Defender for Cloud and Microsoft Purview for data governance.
Professional-level certifications such as CISSP, AWS Certified Security Specialty, or Microsoft AZ-500.
Experience contributing to security roadmaps, architectural reviews, and process documentation (moving from "reactive" to "proactive" security).
Previous experience working in a Lead capacity within a managed services or staff augmentation model.