Security Engineer

About the Role

We are looking for a hands-on Senior Security Engineer responsible for strengthening the security of our end-user environment and infrastructure across on-premises, data center, and cloud environments.
This role will focus primarily on endpoint security, infrastructure and network security, vulnerability management, incident response, Zero Trust, and security automation. The ideal candidate should also have practical experience applying AI technologies to improve security operations, threat detection, investigation, and automation.

What You'll Do:

• Own and continuously improve the security of end-user devices and enterprise infrastructure.
• Deploy, manage, and optimize endpoint security and EDR solutions such as CrowdStrike or equivalent.
• Manage endpoint protection, device hardening, security configurations, and endpoint vulnerability remediation.
• Manage and improve Data Loss Prevention (DLP), secure web/cloud proxy, and other end-user security controls.
• Implement and continuously improve Zero Trust security principles across users, endpoints, applications, and infrastructure.
• Work with Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions to secure user and administrative access.
• Manage and improve network security controls, including firewalls, IDS/IPS, WAF, network segmentation, and secure remote access.
• Understand network architecture, protocols, and traffic flows and identify opportunities to strengthen network security.
• Secure Linux-based infrastructure and work with infrastructure teams on system hardening, secure configurations, and access controls.
• Identify security vulnerabilities, misconfigurations, and infrastructure security gaps and drive remediation with the appropriate engineering teams.
• Own and support vulnerability management across endpoints, servers, network devices, and infrastructure.
• Participate in vulnerability assessments, penetration testing, security scans, and remediation activities.
• Monitor and investigate security alerts using SIEM, EDR, network security, and other security platforms.
• Participate in security incident response, including investigation, containment, remediation, recovery, and root-cause analysis.
• Work closely with Infrastructure, Network, IT, SRE, Cloud, and Engineering teams to ensure security is incorporated into architecture and design.
• Perform security reviews of infrastructure changes, new technologies, and architecture designs.
• Support security across on-premises, data center, private-cloud, and public-cloud environments.