Senior Security Engineer

The Senior Security Engineer is responsible for advancing and protecting the organization's security posture through the design, implementation, and continuous improvement of cybersecurity controls, threat detection capabilities, vulnerability management programs, and incident response processes. This role combines technical security engineering expertise with operational oversight, driving security automation, improving detection and response effectiveness, and supporting compliance initiatives across cloud and on-premises environments. The position plays a critical role in reducing organizational risk, strengthening cyber resilience, supporting strategic security initiatives, and ensuring the business can operate securely and effectively. 

Key Responsibilities

Lead and mature enterprise vulnerability management activities, including scanning, prioritization, remediation tracking, and reporting.

Develop and implement security automation to improve operational efficiency, detection capabilities, and reporting processes.

Monitor, manage, and optimize security technologies including EDR, firewalls, IDS/IPS, DLP, cloud security, and email protection platforms.

Maintain and enhance incident response plans, playbooks, escalation procedures, and communication protocols.

Coordinate and support security incident investigations with internal stakeholders and external partners.

Contribute to detection engineering, log correlation, monitoring improvements, and security control optimization.

Conduct security risk assessments and provide recommendations to mitigate identified risks.

Evaluate, implement, and integrate new security tools and technologies to enhance protection and visibility.

Partner with infrastructure and DevOps teams to embed security into system architecture, cloud environments, and CI/CD pipelines.

Support security compliance initiatives, audits, policy development, and adherence to industry standards and regulatory requirements.

Contribute to the execution of the cybersecurity strategy and roadmap, supporting the organization's long-term security objectives.

Provide mentorship, guidance, and knowledge sharing to security team members and key stakeholders.  

Skills, Knowledge and Expertise 

7+ years of cybersecurity experience with progressively increasing responsibility.

Professional security certifications such as CDSA, SAL1, CEH, OSCP, GCIA, or equivalent are preferred.

Experience with automation, scripting, and API integrations using technologies such as Python, PowerShell, or Bash.

Strong knowledge of cybersecurity technologies, frameworks, protocols, and best practices.

Experience with endpoint security, cloud security, vulnerability management, web application security, data loss prevention, and email security solutions.

Strong understanding of threat detection, incident response, and security operations.

Experience conducting security risk assessments and supporting audit and compliance activities.

Knowledge of security standards and frameworks such as NIST CSF, SOC 2, ISO 27001, and GDPR.

Strong analytical, problem-solving, and troubleshooting skills.

Excellent communication and stakeholder management skills.

Ability to work effectively in a fast-paced, dynamic environment and collaborate across multiple time zones.

Demonstrated ability to mentor, influence, and collaborate with technical and business teams.  

Benefits 

At Dye & Durham we strive to be visionaries! As a leader in our field, we ensure our employees are ready for the next challenge in their journey with us by offering internal and external training opportunities. We offer competitive salaries and a whole host of benefits including healthcare, pension, company discounts, wellness programs, and paid days off to move house or volunteer for your favourite charity. 

In line with the amended Employment Standards Act 2000, the salary range for this role is: $140K, dependent on assessment of skills during the interview process.

#DDhp