Note: The job is a remote job and is open to candidates in USA. Thales provides identity management and data protection solutions that secure digital interactions for organizations worldwide. The Sr Engineer will provide technical leadership for the Advanced Security Response team, resolve complex customer security incidents, analyze threats, and design application security mitigations. The role also involves customer engagement, forensic analysis, cross-functional collaboration, and automation of incident response workflows.
Responsibilities
- Serve as a senior technical resource for the Americas Advanced Security Response (ASR) team, providing technical leadership, mentoring engineers, and promoting best practices in incident response and application security
- Own the technical resolution of complex customer issues, escalations, and critical incidents, acting as a trusted advisor while ensuring timely communication, root cause analysis, and customer satisfaction
- Collaborate with customers, Services Teams, Customer Success, Security Threat Research, Product Management, Product Development, and Engineering teams to resolve high-impact issues and drive product and service improvements
- Analyze customer traffic, logs, attack trends, security alerts, and case history to identify risks, recommend security improvements, and strengthen customers' overall application security posture
- Design, implement, and optimize custom security policies that detect, prevent, and mitigate application-layer attacks while minimizing false positives and ensuring optimal application availability
- Serve as technical escalation point during sophisticated application attacks, including large-scale Distributed Denial-of-Service (DDoS) incidents, zero-day threats, and advanced web application exploits
- Perform forensic analysis of application logs, security events, and attack payloads to identify vulnerabilities, validate attack patterns, and provide actionable remediation recommendations
- Document technical findings, create knowledge base articles, and share best practices that improve operational consistency, accelerate incident resolution, and enhance the technical capabilities of the ASR team
- Develop and maintain automation solutions to streamline ASR workflows, reduce manual effort, and improve incident response efficiency
Skills
- Minimum of 4 year bachelors degree in Information Systems or Computer Science or Telecommunications or any Technology field and minimum of 6 years experience in application or network security in a customer facing role with at least last 3 years in Security Engineering/Threat Mitigation role OR 4 years' experience in application or network security with a Master's degree in a technology field with at least 2 years in Security Engineering/Threat mitigation role
- Excellent analytical and problem-solving approach alongside self-learning ability. Passion for customer success/advocacy
- Demonstrated experience in working with Internet Security and Networking Technologies such as TCP/IP, HTTP, SSL/TLS, Proxies, Firewalls, OWASP Top 10, and OWASP Automated Threats to Web Applications
- Hands-on experience in identifying BOT behaviors and mitigating BOT attacks. And with web application vulnerabilities and common attack techniques (SQLi, XSS, OWASP Top 10, etc)
- Experience with one or more scripting languages (i.e. python, bash, java, etc)
- Applicants must be legally authorized to work in the United States for any employer at the time of hire. This position is not eligible for visa sponsorship or for assuming sponsorship of an employment visa now or in the future
- Expertise with network security architecture, engineering, and security frameworks
- Ability to anticipate customer and team expectations/needs and communicate effectively with relevant teams to resolve technical issues
- A degree of flexibility to take appointments evenings and mornings, as required
Benefits
- Hybrid work arrangement in San Jose
- Elective Health, Dental, Vision, FSA/HSA, Voluntary Life and AD&D, Whole Group Life w/LTC, Critical Illness, Hospital Indemnity, Accident Insurance, Legal Plan, Identity Theft, and Pet Insurance for all full-time employees working 30 or more hours per week and their eligible dependents
- Retirement Savings Plan after 30 days of employment with a company contribution and a match, with no vesting period
- Company-paid holidays and Paid Time Off
- Company-provided Life Insurance, AD&D, Disability, Employee Assistance Plan, and Well-being Program
Company Overview