Note: The job is a remote job and is open to candidates in USA. KPA is seeking a Senior Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology. This role owns KPA's security platforms, cloud security, identity, automation, and technical security initiatives.
Responsibilities
- Own KPA's enterprise security platforms, including CrowdStrike, Rapid7 (InsightIDR, InsightVM, InsightAppSec, MDR), Cisco Umbrella, Cisco Duo, KnowBe4, and related technologies
- Lead vulnerability management and remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives
- Lead security incident response, investigations, containment, remediation, and post-incident reviews
- Own the ongoing operation of SOC 2 controls, security audit requirements, and technical compliance initiatives
- Own Cisco Meraki security, VPN infrastructure, network security controls, and secure cloud connectivity
- Secure Azure, AWS, Microsoft 365, Entra ID, AWS Identity Center, Auth0, and cloud-native workloads using modern security best practices
- Administer and improve identity governance across Microsoft Entra ID, Cisco Duo, AWS Identity Center, Auth0, SSO, SCIM, Conditional Access, PIM, privileged accounts, service accounts, and authentication architecture
- Partner with DevOps to integrate security into CI/CD pipelines, Infrastructure as Code, containers, Kubernetes, and cloud workloads, including SAST, DAST, Snyk, and other application security technologies
- Own and continually improve KPA's cloud security posture management, workload protection, identity controls, logging, alerting, detection engineering, and remediation processes
- Own email security across Microsoft 365, SendGrid, Amazon SES, SPF, DKIM, DMARC, and phishing protection
- Build security automation using PowerShell, Python, Microsoft Graph, REST APIs, and AI-assisted development
- Lead security assessments for new vendors, SaaS platforms, cloud services, and third-party integrations; administer third party vendor management (TPVM) and support ongoing vendor risk management
- Administer and improve KPA's security awareness program, security policies, standards, and technical procedures
- Support AI security and governance initiatives, including ChatGPT Enterprise, Claude, MCP, and emerging AI technologies
- Support security architecture reviews for new cloud services, platforms, integrations, and technical initiatives
- Proactively identify security gaps, technical debt, and opportunities to improve KPA's security posture through automation, AI, and modern engineering practices
Skills
- 5+ years of experience in security engineering, cloud security, infrastructure security, or a related senior technical role
- Strong knowledge of identity security, endpoint security, vulnerability management, network security, incident response, and zero trust principles
- Experience securing Azure, AWS, Microsoft 365, Entra ID, Windows, and Linux
- Familiarity with CI/CD pipelines, Kubernetes, container security, application security scanning, and DevSecOps practices
- Scripting and automation experience using PowerShell, Python, REST APIs, or similar technologies
- Experience supporting SOC 2 & NIST CSF or comparable security and compliance frameworks
- Excellent communication, documentation, project leadership, and problem-solving skills
- Bachelor's degree in Computer Science, Information Technology or Cybersecurity or equivalent experience
- Relevant certifications such as CompTIA Security+, CISSP, CCSP, AWS Certified Security, or equivalent certifications are preferred
Company Overview