Senior Security Engineer

Pindrop

8d•$137,000 - $165,000•Remote

About The Position

As a Senior Security Engineer, you will own the results and impacts for the following: Conduct comprehensive security assessments and risk analyses of systems, networks, infrastructure, and applications to identify vulnerabilities and drive improvements across both on-premises and cloud postures. Lead the design, development, and implementation of security controls, tool integrations, security log onboarding, incident response plans, and automation for compliance checks, alerts, and reporting. Own and manage the administration of core security platforms and technologies, including EDR, SIEM, DLP, vulnerability management, firewalls, and web application firewalls. Perform technical security assessments, penetration testing, code audits, and offensive/defensive security exercises to continuously evaluate, strengthen, and validate detection and response capabilities. Utilize AI tools and methodologies to improve productivity, automate threat detection, vulnerability scanning, and alerting, proactively identifying and mitigating emerging threats. Provide expert guidance and mentorship to internal teams on SIEM, Incident Response, WAF, and evidence requirements for frameworks such as ISO27001, SOC2, PCI DSS, and NIST. Continuously monitor security events, lead security investigations, and coordinate incident response activities during active security breaches. Stay current with emerging technologies (including AI, machine learning, and IoT risks), trends, threat intelligence, security certifications, and compliance regulations. Proactively advocate for process improvement and security innovation across the organization. Prepare and deliver documentation and dashboards for stakeholders and customers, conveying actionable insights from security-related activities and findings.

Requirements

5+ years of hands-on experience with security technologies and tools such as EDR, SIEM, DLP, vulnerability management, penetration testing, SAST/DAST, and file integrity monitoring.
3+ years of experience leading Security Operations, incident response, and investigations, with a solid track record of resolving security events and developing incident response plans.
Advanced proficiency with scripting or programming languages (Python, Bash, Go, Ruby, or Java) to automate security operations and build custom security tooling.
Deep expertise across cloud and hybrid environments (AWS and GCP required; Azure is a plus), with strong networking fundamentals and experience designing/implementing secure network architectures.
Demonstrated ability to administer and integrate core security tech with enterprise infrastructure alongside a verified familiarity with key frameworks: ISO27001/27002, NIST, CIS, PCI DSS, SOC2, ITIL, COBIT.

Nice To Haves

Prior software development experience or architectural experience in designing secure software solutions.
Hands-on experience utilizing AI/ML technologies to enhance threat detection, automate remediation, or predict system vulnerabilities.
Recognized industry security certifications (e.g., CISSP, CISM, GIAC, CEH, CISA, AWS Security).
Direct experience with modern containerization, cloud-native security, and orchestration tools (Kubernetes, Docker, Terraform/Infrastructure-as-Code).

Responsibilities

Conduct comprehensive security assessments and risk analyses of systems, networks, infrastructure, and applications to identify vulnerabilities and drive improvements across both on-premises and cloud postures.
Lead the design, development, and implementation of security controls, tool integrations, security log onboarding, incident response plans, and automation for compliance checks, alerts, and reporting.
Own and manage the administration of core security platforms and technologies, including EDR, SIEM, DLP, vulnerability management, firewalls, and web application firewalls.
Perform technical security assessments, penetration testing, code audits, and offensive/defensive security exercises to continuously evaluate, strengthen, and validate detection and response capabilities.
Utilize AI tools and methodologies to improve productivity, automate threat detection, vulnerability scanning, and alerting, proactively identifying and mitigating emerging threats.
Provide expert guidance and mentorship to internal teams on SIEM, Incident Response, WAF, and evidence requirements for frameworks such as ISO27001, SOC2, PCI DSS, and NIST.
Continuously monitor security events, lead security investigations, and coordinate incident response activities during active security breaches.
Stay current with emerging technologies (including AI, machine learning, and IoT risks), trends, threat intelligence, security certifications, and compliance regulations.
Proactively advocate for process improvement and security innovation across the organization.
Prepare and deliver documentation and dashboards for stakeholders and customers, conveying actionable insights from security-related activities and findings.

Benefits

Competitive compensation package, including RSUs (Restricted Stock Units) for all employees, so everyone shares in our long-term success.
Remote-first environment - giving you flexibility and autonomy in how you structure your day.
Unlimited Paid Time Off (PTO)
Generous health and welfare plans to choose from - including one employer-paid “employee-only” plan!
Best-in-class Health Savings Account (HSA) employer contribution
Low-cost vision and dental plans for you and your family, providing comprehensive coverage and peace of mind.
Paid Parental Leave - Including birth, adoptive & foster parents
One year of diaper delivery for your newest addition to the family!
Recurring monthly phone and internet allowance to help cover essential connectivity costs and support flexible work.
Enhanced fertility and GLP-1 benefits to support family-building journeys and personalized health needs.
Annual Learning & Development stipend to support your professional growth, skill-building, certifications, and continued education.