Note: The job is a remote job and is open to candidates in USA. IntegraTouch is recruiting for a confidential technology company seeking a Senior Security Engineer. The role owns security strategy and hands-on engineering across cloud infrastructure, applications, data, and internal systems, supporting the company’s SaaS products and growth.
Responsibilities
- Security strategy and policy: Build and execute a prioritized security roadmap aligned with business growth, client commitments, and risk
- Compliance and audit readiness: Lead SOC 2 readiness and ongoing examination support, including control implementation, evidence collection, assessor coordination, and remediation
- Cloud and infrastructure security: Secure AWS environments, networks, servers, databases, endpoints, encryption, secrets, and production access
- Identity and access management: Implement least privilege, multifactor authentication, single sign-on, role-based access, and controls for service accounts and workload identities
- Application and API security: Partner with developers to strengthen authentication, authorization, client data isolation, secure integrations, and protection of sensitive information
- Secure software delivery: Integrate code analysis, dependency scanning, secrets detection, and security checks into CI/CD pipelines
- Security operations and response: Own vulnerability management, monitoring, incident investigation, technical containment, and recovery
- Security testing and remediation: Coordinate penetration testing, prioritize findings, and work with engineering to verify fixes
- Client and vendor assurance: Lead security questionnaire responses, support client assessments, and evaluate third-party security risks
- Resilience and automation: Strengthen recovery capabilities and automate controls, evidence collection, and recurring operational tasks
- AI security: Establish practical safeguards for sensitive-data exposure, third-party access, and permissions associated with AI-enabled tools
- Cross-functional collaboration: Contribute to security-focused QA, release validation, production troubleshooting, and targeted scripting or development
Skills
- Proven hands-on experience in security engineering, cloud security, infrastructure security, or DevSecOps
- Direct responsibility for implementing, troubleshooting, and operating production security controls
- Strong AWS security experience across identity and access management, networking, encryption, secrets management, and logging
- Experience supporting SOC 2 readiness or examinations , including implementing controls, collecting evidence, and resolving findings
- Working knowledge of SaaS, web application, API, and database security
- Experience with vulnerability management, penetration test remediation, security monitoring, and incident response
- Scripting and automation skills using Python, PowerShell, Bash , or a comparable language
- Familiarity with infrastructure as code and CI/CD workflows
- Experience translating security frameworks and client requirements into practical technical controls
- Clear communication, sound judgment, and the ability to explain risks and recommendations to technical and business audiences
- The initiative to take ownership and the flexibility to contribute within a small, growing team
- Building or significantly improving a security program within a growing technology or SaaS company
- A foundation in cloud infrastructure, systems engineering, DevOps, or software development
- SOC 2 Type II examination support and experience protecting sensitive data in regulated environments
- Terraform and AWS services such as IAM, KMS, VPC, Secrets Manager, CloudTrail, Config, GuardDuty, and Security Hub
- C#/ASP.NET Core, SQL Server, and Windows Server
- Comparable application security experience in other stacks is welcome
- Windows and Apple endpoint security and device management
- NIST CSF 2.0, OWASP-informed application security, and third-party risk assessments
- Experience evaluating managed security providers and recommending security tools
- Relevant certifications such as CISSP, CCSP, CISM, or SSCP
Company Overview
Company H1B Sponsorship