Security Engineer

Job not on LinkedIn

🔥 13 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Censys

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🔒 Cybersecurity

🏢 Enterprise

Cybersecurity • Enterprise • Data

Censys is a leading Internet Intelligence Platform that specializes in Threat Hunting and Attack Surface Management. It provides security teams with a comprehensive, accurate, and up-to-date map of the internet to defend against attacks and hunt for threats. Censys offers solutions for Cloud Asset Discovery, Exposure and Risk Management, and External Attack Surface Management. Its proprietary Internet Map delivers detailed insights and extensive internet scanning capabilities, allowing organizations to continuously monitor internal and external attack surfaces. Founded by the creators of ZMap at the University of Michigan, Censys is deeply rooted in the security open source community and boasts a large internet intelligence community. Censys empowers organizations, including those in financial services, government, and healthcare, to act swiftly against evolving threats and protect their internet-facing assets effectively.

📋 Description

• Own the identity program, cloud security posture, and vulnerability management end to end • Drive down standing access and manual provisioning for joiner-mover-leaver changes and non-human identity management • Harden and improve the GCP-first cloud-native environment, including organization policy, IAM least privilege, workload identity, network segmentation, secrets management, and posture monitoring • Partner with SRE on infrastructure-as-code security guardrails • Own vulnerability management, including asset coverage, risk-based prioritization, remediation partnership, SLAs, and actionable reporting • Use Censys to monitor the company’s external attack surface • Build detection coverage for identity, cloud, and SaaS • Participate in security escalation rotations and lead or co-lead high-severity incidents • Run blameless post-incident reviews, maintain runbooks, and conduct tabletop exercises • Secure the company’s AI footprint, including agent identity, MCP servers, tool permissions, secrets, data flows, prompt-injection boundaries, and AI tooling • Design and ship agentic security workflows for alert triage, evidence collection, access reviews, phishing response, and posture drift detection • Build Slack-native ChatOps requests, approvals, self-service paths, and security automation • Partner with SRE on cloud and infrastructure guardrails and contribute security expertise to their work

🎯 Requirements

• 5+ years in security engineering, with real depth in at least two of: identity and access management, cloud security, vulnerability management, detection and response • Hands-on identity operations experience, including SSO/SAML/OIDC, MFA and conditional access, device trust, and lifecycle automation • Experience securing cloud-first or cloud-native environments; GCP preferred, or strong AWS/Azure background with genuine interest in GCP • Scripting and automation ability using Python, Go, or similar, sufficient to build tooling and API integrations • Incident response experience as a primary responder or lead on high-severity incidents, including post-incident analysis • Hands-on experience building with LLMs or agent frameworks • Working familiarity with a prescriptive control framework such as ISO 27XXX, CMMC, or FedRAMP • Ability to operate with ambiguity on a lean team and prioritize independently • Strong written communication for an async, Slack-heavy environment

🏖️ Benefits

• Identity verification through CLEAR for candidates who receive an offer of employment