Sr IT Security Engineer
Job Description
The position partners with engineering, cloud platform, application, data/AI, and operations teams to reduce risk, improve detection and response outcomes, and support audit and control expectations. As a senior-level role, this position also contributes technical leadership through documentation, standardization, mentoring, and continuous improvement.
Essential Functions and Responsibilities
• Design, implement, and continuously improve secure configurations and guardrails across enterprise and cloud environments, including identity and access controls, network protections, encryption, secrets management, logging, and platform hardening.
• Engineer, administer, and support enterprise security technologies spanning endpoint security, vulnerability management, SIEM/logging, identity management, monitoring, detection, and cryptographic controls.
• Drive remediation of security findings by prioritizing critical and high-risk issues, validating corrective actions, and improving repeatable control patterns.
• Build, operate, and enhance security operations capabilities, including detection engineering, SIEM/SOAR workflows, alert triage, investigation support, incident response playbooks, and operational runbooks.
• Conduct or support incident investigations, root-cause analysis, containment and eradication activities, and lessons-learned follow-through.
• Participate in the on-call support rotation for security incidents, provide technical support during active investigations and response activities, and contribute to post-incident remediation and continuous improvement.
• Develop and maintain technical documentation, engineering standards, implementation procedures, and evidence-quality artifacts to support operational consistency and audit readiness.
• Partner with engineering, cloud, application, and AI/ML stakeholders to implement scalable security controls and secure-by-default patterns.
• Perform technical assessments and proof-of-concept evaluations of new security solutions and recommend changes to procedures, standards, or tooling where appropriate.
• Implement practical security controls for AI-enabled systems and workflows, including governance, access controls, monitoring, and risk reduction for model and application use cases.
• Participate in audits, control reviews, and security assessments; support evidence collection, traceability, and remediation tracking.
• Mentor less experienced engineers and contribute to technical leadership across the team.
• Perform other duties as assigned and understand and adhere to all corporate policies, including the ACI Code of Business Conduct and Ethics.
Qualifications (Education, Experience, Knowledge, Skills, and Abilities)
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, MIS, or related field; equivalent practical experience may be considered.
• 5+ years of experience in security engineering and/or security operations with demonstrated hands-on delivery.
• Strong working knowledge of security fundamentals across identity and access management, encryption, network security, secure logging/telemetry, configuration hardening, and vulnerability/risk remediation.
• Experience implementing and supporting security controls in at least one major cloud environment; direct experience across both AWS and Azure is strongly preferred.
• Demonstrated experience with security operations processes and tooling, such as SIEM/SOAR, detection engineering, alert triage, incident support, security scanning, or operational playbooks.
• Demonstrated ability to translate security findings into practical engineering improvements, documentation, and measurable operational outcomes.
• Experience developing technical documentation, standards, and runbooks for repeatable operational execution.
• Strong communication skills and the ability to work effectively with both technical and non-technical stakeholders.
• Ability to work independently on complex assignments with limited day-to-day supervision.
Preferred Qualifications
• Experience with regulated or audited environments and supporting evidence traceability or control mapping.
• Experience with automation and scripting in Python, PowerShell, Bash, Go, Ansible, or similar tooling.
• Experience with policy-as-code, infrastructure-as-code security gates, or continuous compliance patterns.
• Experience with container, Kubernetes, or workload identity security.
• Experience with threat hunting, post-incident remediation, and engineering-driven control improvements.
• Familiarity with AI/LLM application security, threat modeling, secure evaluation/testing, and governance approaches.
• Advanced knowledge of security standards and frameworks.
• Experience mentoring junior team members.
Licenses and Certifications
• Relevant certifications are strongly preferred. Candidates should demonstrate credible competency across cloud security, cybersecurity operations, and AI / application security through a combination of certifications and directly relevant experience.
Work Environment
• Standard work environment.
• Majority of time spent on PC.
• Participation in an on-call rotation is required to support incident response, escalations, and urgent security events.
• Travel may be required on a limited basis.
