Staff Security Engineer

primer.ai•Washington, DC

2d•$175,000 - $235,000•Remote

About The Position

Primer exists to make the world a safer place. We do this by providing trusted decision-ready AI to the world's most critical organizations. Our software enables leaders, operators, and analysts to better understand the changing world around us in real time and make informed decisions when the stakes are high. Primer has offices in San Francisco, Pasadena, CA and Arlington, VA. For more information, please visit https://primer.ai/ As a Staff Security Engineer, you will be a valuable member of the IT and Information Security teams, managing and improving the organizational security posture. You will help protect sensitive data by implementing and continuously monitoring a secure cloud architecture. You will work with the security toolchain in cloud environments and support the development of security best practices and standards. Your responsibilities will also include managing vulnerability scanning and remediation efforts, responding to security alerts under supervision, and leading in root cause analysis. You will own the DAST and SAST solutions and be a key member of the incident response processes, tracking cyber actions from initial detection to final resolution.

Requirements

10+ years of experience in Security and/or Cloud Operations
Strong written and oral communication skills
Hands-on experience with AWS
Direct experience with intrusion prevention systems
Experience with system logging and SIEM technologies
Experience with cloud native security tools (e.g., IAM, WAF)
Experience integrating Okta as an IdP into security processes
Knowledge of incident response processes and practices
Hands-on experience with vulnerability management tools, technologies, and methods
Proven ability to integrate security practices into IT and/or DevOps environments
Experience automating security processes

Nice To Haves

Knowledge of Python and Golang
Cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer, or Certified Cloud Security Professional (CCSP)

Responsibilities

Analyze the organizational security posture and seek improvements on a continuous basis
Implement and manage security solutions and controls for cloud-based infrastructure, platforms, and applications
Conduct security assessments and audits of cloud environments to identify and remediate security vulnerabilities and misconfigurations
Manage and optimize cloud-based security tools (e.g., EDR solutions)
Respond to security alerts and conduct root cause analysis
Perform incident response and track cyber actions from initial detection to final resolution
Work with the IT team to broaden the Zero Trust framework
Collaborate with cross-functional teams, including DevOps, IT, and development teams, to integrate security into the software development lifecycle (SDLC) and DevSecOps practices
Automate security solutions to drive continuous compliance across the infrastructure
Stay up-to-date with industry trends, emerging threats, and best practices in cloud security, and recommend security enhancements and improvements as needed