Senior Security Engineer

Ardent Mills•Denver, CO

1d•$140,000 - $200,000•Remote

About The Position

Senior Security Engineer Position Summary: As a Senior Security Engineer, you will provide deep technical leadership across detection engineering, endpoint/network/cloud security, and resilience. You will architect advanced controls, lead complex investigations, and mentor engineers while shaping the technical roadmap. This role partners closely across security and IT functions and provides cross-domain support to strengthen overall security coverage. Your responsibilities: Own detection engineering: SIEM use-cases, data pipelines, parsers, enrichment, and tuning to reduce false positives. Lead threat hunting and purple-team exercises; drive control improvements based on TTPs (ATT&CK). Architect endpoint and email security baselines; optimize EDR/XDR policies and response automation. Implement and optimize Data Loss Prevention (DLP) technical controls and integrations in alignment with enterprise data protection requirements. Guide vulnerability management strategy (risk-based prioritization, exploitability analysis, compensating controls). Design partner in network security architectures (micro-segmentation, firewall policies, NDR) and secure remote access (SASE/ZTNA). Provide key insights for cloud workload protection (CSPM/CWPP/CIEM) and secure identity governance integrations. Perform root-cause analysis and forensics coordination, document findings and corrective actions. Mentor engineers; set coding and automation standards for security tooling and integrations. Drive technology selection, POCs, and reference implementations; maintain technical roadmaps. Track and improve detection quality metrics (e.g., false positives, coverage, MTTR). Represent security in architecture boards and major program decisions. Develop and maintain security automation and response playbooks in partnership with SOC/MDR providers to improve detection and response efficiency. Familiarity with OT/ICS security considerations in manufacturing environments. Partner with SOC/MDR provider to continuously improve detection coverage and tuning.

Requirements

Bachelor’s degree in computer science, Engineering, or related field (or equivalent experience).
7-10 years in security engineering/operations with demonstrated leadership in complex environments.
Expertise in SIEM/XDR (e.g., Microsoft Sentinel, Defender XDR), network security, identity security, and cloud security platforms.
Experience working with SOC/MDR providers in a co-managed security model.
Experience working in hybrid environments spanning on-premises and Azure cloud.
Strong automation and scripting (Python/PowerShell); familiarity with data engineering for security telemetry.
Certifications: CISSP; OSCP or equivalent offensive credential; GIAC (GCIA/GCED/GREM) or similar advanced certs; CCSP.

Nice To Haves

Experience leading red/purple team programs and building detection-as-code.
Certifications: SANS/GIAC GSE, AWS/Azure professional-level security certifications.

Responsibilities

Own detection engineering: SIEM use-cases, data pipelines, parsers, enrichment, and tuning to reduce false positives.
Lead threat hunting and purple-team exercises; drive control improvements based on TTPs (ATT&CK).
Architect endpoint and email security baselines; optimize EDR/XDR policies and response automation.
Implement and optimize Data Loss Prevention (DLP) technical controls and integrations in alignment with enterprise data protection requirements.
Guide vulnerability management strategy (risk-based prioritization, exploitability analysis, compensating controls).
Design partner in network security architectures (micro-segmentation, firewall policies, NDR) and secure remote access (SASE/ZTNA).
Provide key insights for cloud workload protection (CSPM/CWPP/CIEM) and secure identity governance integrations.
Perform root-cause analysis and forensics coordination, document findings and corrective actions.
Mentor engineers; set coding and automation standards for security tooling and integrations.
Drive technology selection, POCs, and reference implementations; maintain technical roadmaps.
Track and improve detection quality metrics (e.g., false positives, coverage, MTTR).
Represent security in architecture boards and major program decisions.
Develop and maintain security automation and response playbooks in partnership with SOC/MDR providers to improve detection and response efficiency.
Familiarity with OT/ICS security considerations in manufacturing environments.
Partner with SOC/MDR provider to continuously improve detection coverage and tuning.