Security Engineer

**How you'll make an impact:
**As the Senior Security Engineer, you will work as a team member on the Security team you will be ensuring Strata has the correct security measures in place and provide continuous improvement opportunities to extend our capabilities and security to our client data. Assist in the maintenance the Zero Trust Security framework and associated tooling across the organization. Strata has a hybrid environment, and the ideal candidate will need to be comfortable working in a hybrid environment with on premises and cloud infrastructure.

In your role as the Senior Security Engineer, you will be tasked with managing and maintaining this environment including configuration management, upgrades, identification of end of life/support systems that need to be replaced, architecture of new solutions, and recommending and executing modifications to these systems to improve efficiency, reliability, and performance.

The engineer in this role will focus on the following areas and technologies:

• Zero Trust Principles Expansion:

• Mature Strata’s newly implemented Zero Trust program through policy refinement, tool optimization, roadmap development, and alignment to business use cases.

• Manage identity, access, and secure connectivity controls, including MFA, conditional access, privileged access, least privilege, DNS/content filtering, secure web gateway, and certificate-based controls.

• Partner with IT, networking, security, and business teams to resolve access issues, blocked traffic, policy behavior, connectivity problems, and related security events.

• Strengthen enterprise security controls across endpoint, cloud, SaaS, AI, identity, network, and data protection platforms using security frameworks, CIS benchmarks, lifecycle management, and threat data.

• Tool Deployment & Integration:

• Lead the selection, deployment, and optimization of security tools including SIEM, EDR, XDR, IAM, and cloud security solutions.

• Implement automation for security operations to improve efficiency, accuracy, and response times.

• Assist in tuning tools to alleviate alert fatigue and false positives.

• Leverage AI to ensure workflows are efficient and automated.

• Cross-Functional Collaboration:

• Work closely with IT, DevOps, and other teams to integrate security best practices into all aspects of the business.

• Partner with other members of the security organization to establish security guidelines that enable the organization to move fast in a safe and secure manner.