Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.
Job Summary
We are seeking an experienced and highly motivated Senior Security Engineer to lead the design, implementation, and management of our organization’s security infrastructure. This role will focus on proactively protecting systems, networks, and applications from internal and external threats while ensuring compliance with industry regulations and best practices. The ideal candidate will possess a strong technical background, excellent problem-solving skills, and the ability to communicate effectively across departments.
Key Responsibilities
Security Architecture & Engineering
· Design, implement, and maintain security solutions including firewalls, SIEM, EDR, DLP, VPNs, IDS/IPS, and zero trust architecture.
· Provide technical expertise on encryption, authentication, cloud security, and secure network design.
· Conduct threat modeling and develop mitigation strategies for on-prem, cloud, and hybrid environments.
Monitoring & Incident Response
· Lead incident response efforts including triage, investigation, containment, eradication, and lessons learned.
· Maintain and tune threat detection systems (SIEM, EDR) to ensure actionable alerts and timely response.
· Conduct root cause analysis on security incidents and develop playbooks for repeatable, automated response.
Vulnerability & Risk Management
· Perform regular vulnerability assessments and penetration tests; track remediation and provide executive-level reporting.
· Conduct risk assessments and support audit activities (HIPAA, PCI-DSS, NIST, ISO 27001).
· Work with DevOps/IT to validate secure configurations, patch management, and system hardening.
Governance, Compliance & Training
· Develop and enforce security policies, procedures, and standards aligned to industry frameworks.
· Support compliance efforts across internal stakeholders and external auditors.
· Deliver security awareness and secure coding training to engineering and business teams.
Cross-Functional Collaboration
· Partner with IT, Legal, HR, and business units to align security initiatives with organizational goals.
· Participate in software development lifecycle (SDLC) and CI/CD pipeline reviews to ensure security-by-design.
· Advise procurement teams on security requirements for third-party vendors and SaaS solutions.
Qualifications
Required
· Bachelor’s degree in computer science, Information Security, or related field—or equivalent experience.
· Minimum 5–8 years in cybersecurity, with at least 2 years in a senior-level role.
· Strong understanding of networking, system administration (Windows/Linux), and cloud environments (Azure, AWS, or GCP).
· Deep knowledge of industry standards: NIST, CIS, MITRE ATT&CK, OWASP, ISO 27001.
· Hands-on experience with security platforms: SIEM (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike, Defender), and vulnerability scanners (e.g., Tenable, Qualys).
Preferred
· Certifications: CISSP, OSCP, GIAC (GSEC/GCIH/GCIA), CISM, or relevant cloud security certifications.
· Experience in regulated industries such as healthcare, finance, or government.
· Familiarity with Kubernetes, containers, Terraform/IaC, and DevSecOps practices.
Similar Jobs
Information Technology • Professional Services
Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.
Top Skills:
AuthenticationAWSAzureCi/CdCisContainersDevsecopsDlpEdr (CrowdstrikeEncryptionFirewallsGCPIds/IpsIso 27001KubernetesLinuxMicrosoft Defender)Microsoft Sentinel)Mitre Att&CkNistOwaspQualys)Siem (SplunkTerraform/IacVpnsVulnerability Scanners (TenableWindowsZero Trust Architecture
Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
Develop machine learning models, predictive solutions, data pipelines, data models, and feature engineering workflows. Analyze large datasets, validate model outputs, document assumptions, and translate business needs into technical requirements and recommendations. Collaborate with stakeholders, refine analytical use cases, support solution prototyping, and guide junior team members through coaching and technical feedback.
Top Skills:
Artificial IntelligenceData ModelingData PipelinesData VisualizationFeature EngineeringMachine LearningPredictive ModelingStatistical Analysis
Artificial Intelligence • Big Data • Cloud • Security • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Own and scale Nasuni’s Marketing PMO by designing planning cadences, governance, intake processes, work-management infrastructure, metrics, and cross-functional operating models. Lead strategic programs involving marketing, IT, sales operations, finance, acquisitions, and transformation initiatives. Optimize Smartsheet, improve execution visibility and predictability, manage dependencies and risks, and implement AI-enabled workflows with appropriate validation and human accountability.
Top Skills:
HubspotSalesforceSharepointSlackSmartsheet
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
