Security Engineer / Lead

About the Role

We are looking for a highly skilled, hands-on Senior Security Engineer to own and engineer our internal security ecosystem across endpoints, identities, networks, cloud/on-prem infrastructure, R&D labs, and controlled production environments.

In this role, you will be the technical authority designing, building, and operating our technical security architecture. Working closely with an External CISO, IT, DevOps/Platform, and R&D teams, you will move seamlessly between high-level architectural design, deep incident investigation, and building automated security workflows.

Key Responsibilities (What You’ll Do)

• Infrastructure & Network Security: Design and implement robust security architecture and segmentation across R&D networks, HPC, cloud (AWS/GCP), Kubernetes, on-prem, and air-gapped / isolated environments.

• Identity & Access Management (IAM): Own identity security including IAM, SSO/MFA, service accounts, admin controls, PAM/JIT access, and lifecycle/offboarding visibility.

• Visibility & Endpoint Protection: Establish reliable asset visibility and deploy, operate, and optimize EDR/XDR, SIEM/logging pipelines, MDM, vulnerability management, and system hardening.

• Data Security & Resiliency: Protect sensitive R&D data across Google Workspace, networks, endpoints, and removable media (DLP, PKI, secrets controls). Improve backup/recovery and ransomware resilience.

• Detection & Incident Response: Build detections, investigate incidents, lead containment/remediation, and drive continuous improvement.

• Automation & Agentic Tooling: Leverage Python, PowerShell, Bash, and modern APIs/Agentic AI workflows to automate threat enrichment, evidence collection, and response actions.

Requirements & Qualifications

• Civilian Commercial Experience: At least 4+ years of hands-on experience in a structured high-tech / commercial technology company. (Military technological unit background is an advantage).

• Core Technical Depth: Strong, multi-domain hands-on expertise spanning Endpoint, Identity, Network, and Detection capabilities across both Linux and Windows.

• Cloud & DevOps Security: Practical depth in Cloud (AWS/GCP), Kubernetes (K8s), Infrastructure as Code (Terraform), and CI/CD security integration.

• Security Stack Fluency: Direct experience with SIEM/log pipelines, EDR/XDR, MDM (e.g., Intune/Jamf), IAM/SSO/PAM, ZTNA, and vulnerability management.

• Automation & Scripting: Strong coding/scripting skills (Python, PowerShell, Bash) and API integrations. Experience with security automation or AI/agentic workflows operating on security telemetry is a major plus.

• Problem Solver Mindset: Ability to handle complex R&D environments, isolated/air-gapped networks, or high-performance computing (HPC).