https://www.ardaninc.com/california-employee-and-job-application-privacy-notice/
Position Summary: Senior Security Engineer protects the organization's information assets through cybersecurity operations, security engineering, incident response, and strategic technology initiatives. Working closely with IT leadership, infrastructure teams, and third-party security partners, this role helps implement and mature the enterprise cybersecurity program while supporting compliance, operational excellence, and continuous improvement.
Essential Functions:
Security Operations
- Investigate, triage, document, and prioritize security events.
- Execute approved containment, eradication, and recovery actions.
- Maintain incident records, evidence collection, and executive reporting.
- Continuously improve detection quality by reducing false positives.
- Investigate, triage, document, and prioritize security events.
- Execute approved containment, eradication, and recovery actions.
- Maintain incident records, evidence collection, and executive reporting.
- Continuously improve detection quality by reducing false positives.
Security Engineering & Strategic Initiatives
- Plan, deploy, configure, and optimize enterprise security technologies.
- Develop security playbooks, automation, and standard operating procedures.
- Evaluate emerging security technologies and recommend improvements.
- Partner with IT teams to embed security into new solutions and projects.
- Support vulnerability scanning, remediation, and validation.
- Tune SIEM, EDR, and security monitoring rules.
- Participate in infrastructure, cloud, AI, and enterprise security projects.
- Support implementation of strategic cybersecurity initiatives and roadmap objectives.
Governance, Risk & Compliance
- Support SOC 2, regulatory, and internal compliance initiatives.
- Assist with development of security policies, standards, and procedures.
- Support phishing simulations and security awareness training.
- Promote continuous improvement through risk assessments and control enhancements.
- Collect audit evidence and validate security controls.
- Participate in third-party risk and vendor security reviews.
- Maintain security documentation, operational metrics, and compliance reporting.
- Assist with audit remediation and control monitoring.
Education and Experience:
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience
- 5+ years in Security Operations, Security Engineering, or MDR environments
- Experience responding to cybersecurity incidents and implementing enterprise security technologies
- Experience working within regulated or compliance-driven environments preferred
- Experience with IAM, encryption technologies, network security controls, and security monitoring tools
- Proven experience leading risk assessments and remediation initiatives
- Deep understanding of security frameworks and best practices (e.g., NIST, CIS, ISO 27001)
- Strong analytical, communication, and leadership skills
Technical Skills
|
SIEM & EDR Platforms |
SentinelOne / Microsoft Defender |
|
Microsoft 365 Security |
Active Directory / Microsoft Entra ID |
|
Microsoft Sentinel / Splunk |
Azure & AWS Fundamentals |
|
Windows Server |
Vulnerability Management |
|
TCP/IP, DNS, HTTP/S, SMTP |
NIST CSF, CIS Controls & SOC 2 |
|
PowerShell |
Security Automation |
Preferred Qualifications
- Professional certifications such as CompTIA Security+, CompTIA CySA+, Microsoft SC-200, GIAC GISF / GCIH, CISSP, Microsoft SC-300, AWS Security Specialty, CISSP or CISM (or in progress), Equivalent industry certification
- Experience implementing DevSecOps practices in CI/CD environments
- Experience working in regulated industries
Physical Demands
- Ability to safely and successfully perform the essential job functions consistent with the ADA, FMLA and other federal, state and local standards, including meeting qualitative and/or quantitative productivity standards.
- Ability to maintain reasonably regular, punctual attendance consistent with the ADA, FMLA and other federal, state and local standards.
- Must be able to sit, stand, stoop or bend for an extended period (8 hours).
- Must be able to listen and speak clearly over the phone.
Work Environment
The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually moderate.
Ardán offers some great perks:
- Health, dental, and vision benefits
- Employer-paid disability and life insurance
- Flexible spending accounts
- 401K with company match
- Paid time off and company-paid holidays
- Wellness resources
Note: This job description is not intended to be an exhaustive list of duties, responsibilities, or qualifications associated with the job.
Bachelor's degree or equivalent experience, 5+ years in security operations or engineering, incident response, enterprise security technologies, risk assessments, and security frameworks.
Key Responsibilities
- investigating incidents
- deploying technologies
- assessing risks
Skills & Tools
SentinelOne, Microsoft Defender, Microsoft 365 Security, Active Directory, Microsoft Entra ID, Microsoft Sentinel, Splunk, Azure, AWS, Windows Server, TCP/IP, DNS, HTTP/S, SMTP, PowerShell, NIST CSF, CIS Controls, SOC 2, CI/CD
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — Maitland, Florida, United States
- Languages: English
Benefits
- 401k matching
- Retirement plan
About Ardán Inc
A technology company providing cybersecurity and information technology services. — Industry: Information Technology