Senior Security Engineer

Responsibilities:

• Design, implement, and maintain Zero Trust security architecture across cloud and on-premises deployments.
• Conduct security assessments, vulnerability scans, and penetration testing of our Vision AI platform and infrastructure.
• Implement and enforce security policies, access controls, and compliance frameworks (SOC 2, ISO 27001, GDPR, HIPAA).
• Monitor security events, investigate incidents, and lead incident response procedures following our established protocols.
• Review code for security vulnerabilities, enforce secure coding practices, and conduct security training for engineering teams.
• Manage security tools and infrastructure: SIEM, IDS/IPS, endpoint protection, and cloud security services.
• Perform regular access reviews, ensure least privilege principles, and maintain audit trails for compliance.
• Collaborate with engineering teams to integrate security-by-design into development pipelines and CI/CD processes.
• Stay current with security threats, vulnerabilities, and industry best practices relevant to AI/ML systems and cloud infrastructure.
• Document security procedures, incident response playbooks, and compliance evidence for audits.
• Lead security initiatives and mentor junior security team members.

Requirements:

• 3+ years of experience in cybersecurity, information security, or system security engineering.
• Deep understanding of Zero Trust architecture principles and implementation strategies.
• Experience with cloud security (AWS, GCP, Azure) including IAM, VPC, security groups, and cloud-native security tools.
• Working knowledge of at least one security or compliance framework (SOC 2, ISO 27001, NIST CSF or similar); GDPR/HIPAA exposure is a plus.
• Hands-on experience with security tools: SIEM, vulnerability scanners, penetration testing tools, endpoint protection.
• Proficiency in scripting languages (Python, Bash) for security automation and tooling.
• Experience with container security (Docker, Kubernetes) and infrastructure-as-code security.
• Understanding of network security, encryption, authentication/authorization, and secure communication protocols.
• Familiarity with OWASP Top 10, secure coding practices, and DevSecOps principles.
• Excellent problem-solving skills, attention to detail, and ability to work under pressure during security incidents.
• Strong communication skills to explain security concepts to technical and non-technical stakeholders.
• Relevant security certifications (CISSP, CISM, CEH, GSEC, or cloud security certifications) preferred.
• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.

Skills

Cloud, DevOps, IT Security, Network Administration, System Administration