Sr IT Security Engineer
Job Purpose
The Sr. Security Engineer is responsible for designing, implementing, hardening, and supporting enterprise security capabilities that protect company systems, platforms, and information assets. This role blends hands-on security engineering with operational execution across cloud security, security operations, incident support, and AI security use cases.
The position partners with engineering, cloud platform, application, data/AI, and operations teams to reduce risk, improve detection and response outcomes, and support audit and control expectations. As a senior-level role, this position also contributes technical leadership through documentation, standardization, mentoring, and continuous improvement.
Essential Functions and Responsibilities
Design, implement, and continuously improve secure configurations and guardrails across enterprise and cloud environments, including identity and access controls, network protections, encryption, secrets management, logging, and platform hardening.
Engineer, administer, and support enterprise security technologies spanning endpoint security, vulnerability management, SIEM/logging, identity management, monitoring, detection, and cryptographic controls.
Drive remediation of security findings by prioritizing critical and high-risk issues, validating corrective actions, and improving repeatable control patterns.
Build, operate, and enhance security operations capabilities, including detection engineering, SIEM/SOAR workflows, alert triage, investigation support, incident response playbooks, and operational runbooks.
Conduct or support incident investigations, root-cause analysis, containment and eradication activities, and lessons-learned follow-through.
Participate in the on-call support rotation for security incidents, provide technical support during active investigations and response activities, and contribute to post-incident remediation and continuous improvement.
Develop and maintain technical documentation, engineering standards, implementation procedures, and evidence-quality artifacts to support operational consistency and audit readiness.
Partner with engineering, cloud, application, and AI/ML stakeholders to implement scalable security controls and secure-by-default patterns.
Perform technical assessments and proof-of-concept evaluations of new security solutions and recommend changes to procedures, standards, or tooling where appropriate.
Implement practical security controls for AI-enabled systems and workflows, including governance, access controls, monitoring, and risk reduction for model and application use cases.
Participate in audits, control reviews, and security assessments; support evidence collection, traceability, and remediation tracking.
Mentor less experienced engineers and contribute to technical leadership across the team.
Perform other duties as assigned and understand and adhere to all corporate policies, including the ACI Code of Business Conduct and Ethics.
Qualifications (Education, Experience, Knowledge, Skills, and Abilities)
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, MIS, or related field; equivalent practical experience may be considered.
5+ years of experience in security engineering and/or security operations with demonstrated hands-on delivery.
Strong working knowledge of security fundamentals across identity and access management, encryption, network security, secure logging/telemetry, configuration hardening, and vulnerability/risk remediation.
Experience implementing and supporting security controls in at least one major cloud environment; direct experience across both AWS and Azure is strongly preferred.
Demonstrated experience with security operations processes and tooling, such as SIEM/SOAR, detection engineering, alert triage, incident support, security scanning, or operational playbooks.
Demonstrated ability to translate security findings into practical engineering improvements, documentation, and measurable operational outcomes.
Experience developing technical documentation, standards, and runbooks for repeatable operational execution.
Strong communication skills and the ability to work effectively with both technical and non-technical stakeholders.
Ability to work independently on complex assignments with limited day-to-day supervision.
Preferred Qualifications
Experience with regulated or audited environments and supporting evidence traceability or control mapping.
Experience with automation and scripting in Python, PowerShell, Bash, Go, Ansible, or similar tooling.
Experience with policy-as-code, infrastructure-as-code security gates, or continuous compliance patterns.
Experience with container, Kubernetes, or workload identity security.
Experience with threat hunting, post-incident remediation, and engineering-driven control improvements.
Familiarity with AI/LLM application security, threat modeling, secure evaluation/testing, and governance approaches.
Advanced knowledge of security standards and frameworks.
Experience mentoring junior team members.
Licenses and Certifications
Relevant certifications are strongly preferred. Candidates should demonstrate credible competency across cloud security, cybersecurity operations, and AI / application security through a combination of certifications and directly relevant experience.
Work Environment
Standard work environment.
Majority of time spent on PC.
Participation in an on-call rotation is required to support incident response, escalations, and urgent security events.
Travel may be required on a limited basis.