Security Engineer

• Review tools, applications, and processes to identify security gaps
• Design, implement, and maintain security architectures across cloud, third-party, and on-premises environments
• Evaluate and integrate emerging security technologies
• Integrate security controls into CI/CD pipelines and conduct secure code reviews
• Implement encryption mechanisms and manage cryptographic keys
• Design and manage SSO, IdPs, SAML, OAuth, and OpenID Connect solutions, including Okta and Keycloak
• Define secure coding standards and advise development teams on application security
• Implement security controls aligned with NIST, SOC 2, ISO 27001, and Cyber Essentials
• Support compliance assessments, audits, and remediation activities
• Conduct security risk, threat modelling, and vulnerability assessments
• Develop incident response processes and continuous monitoring capabilities
• Collaborate with SOC and cross-functional teams, mentor junior engineers, and provide technical guidance

• 5+ years of relevant experience in security engineering and GRC-focused security solutions development
• Deep understanding of NIST, ISO 27001, CIS Controls, GDPR, HIPAA, and PCI-DSS
• Hands-on experience with IDS/IPS, SIEM, vulnerability scanners, and penetration testing platforms
• Experience with AWS, Azure, GCP, OCI, or Alibaba and securing cloud-native applications
• Proficiency in Python, Java, or C++
• Experience with Terraform or Ansible
• Strong knowledge of networking protocols, firewalls, VPNs, proxies, and security monitoring tools
• Extensive hands-on experience in DevSecOps and CI/CD security integration
• Expertise in cryptography, encryption, key management, and digital signatures

• Inclusive and diverse work environment
• Reasonable accommodations for people with disabilities
• Equal opportunity employment