Sr. Security Engineer

Bachem•Vista, CA

47d

About The Position

The Sr. Security Engineer is part of the Global IT, Security & Compliance (CISO) team, supporting security across IT, OT, and cloud environments. This role involves managing internal security platforms, partnering with our 24/7 MDR provider, responding to incidents, and integrating security into company-wide initiatives. The Senior SOC Engineer drives threat detection engineering, response automation, and security visibility across endpoints, networks, and cloud infrastructure. They are responsible for the technical leadership of SOC activities, mentoring junior engineers, optimizing integrations (Zscaler, Sentinel, Vulnerability management tools), and contributing to the global security roadmap and incident response program.

Requirements

Bachelor's degree in information security, computer science, or engineering
5 years' experience working in or with a SOC or MDR environment
Strong understanding of incident response processes and digital forensics basics
Knowledge of security frameworks and standards (ISO 27001, NIST, CIS, MITRE ATT&CK)
Ability to design and implement modern, user-friendly security solutions that drive adoption across business and IT/OT stakeholders
Excellent communication skills to collaborate with IT, OT, and business stakeholders
Analytical mindset with problem-solving ability
EDR/XDR and endpoint security (Microsoft Defender)
SIEM/SOAR administration and tuning (Microsoft Sentinel)
Understanding of Identity and Access Management (IAM, PAM, MFA)
Vulnerability management tools and remediation workflows
Cloud security (Azure, AWS, GCP)
Scripting/automation

Nice To Haves

Master's degree in information security, computer science, or engineering (preferred)
Relevant certifications are a plus (e.g., GCIA, GCIH, GCED, Azure Security Engineer, CISSP, Security+)
OT security (ICS/SCADA, IIoT, legacy systems) desirable

Responsibilities

Lead and support internal incident management, including triage, containment, remediation, and post-incident reviews.
Act as the primary interface with our external MDR team for alerts, investigations, and incident handling.
Onboard and integrate new log/data sources into security monitoring.
Monitor vulnerabilities and support patch management coordination.
Design, manage, maintain, and optimize internal security applications such as EDR/XDR, SIEM, SOAR, IAM, PAM, vulnerability management, and DLP.
Develop and automate operational processes, playbooks, and response workflows.
Partner with IT, OT, and business teams to embed security into projects (cloud, infrastructure, workplace, OT).
Support OT security initiatives, including securing industrial control systems, legacy systems, and production environments.
Contribute to security architecture and roadmap initiatives.
Act as a security advocate to promote best practices and raise awareness across teams.
Design modern, user-friendly security solutions that balance usability, compliance, and risk reduction.