Senior Security Engineer

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $160k - $185k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 28 days.

Apply Now

Find Similar Remote Jobs

geekoffice

WebsiteLinkedInAll Job Openings

1 - 10 employees

🔌 API

🛍️ eCommerce

API • eCommerce

GeekOffice is your missing team—an engineering and digital product development partner. We build everything from custom designed websites, to mobile apps to full stack platforms. Our network of engineers, designers, and systems thinkers come alongside your teams to build product and enable your business strategy. Your stuff is important, let us help you build it right.

📋 Description

• Proactively identify, prioritize, and remediate security risks across AWS infrastructure, endpoints, applications, and identity systems • Run and tune CrowdStrike Falcon, AWS GuardDuty, CloudTrail, and the managed SOC/MDR pipeline • Monitor detections, sensor health, prevention policies, and escalations with a 24x7 managed security provider • Improve detection quality and reduce unnecessary alerts through tuning and automation • Own vulnerability management across cloud, endpoint, and applicable on-premises assets • Manage Qualys or equivalent scanning, risk-based prioritization, remediation tracking, verification, and approved exceptions • Coordinate Patch Tuesday reviews and annual external penetration testing • Integrate Snyk or similar SAST, DAST, SCA, and container security scanning into GitHub Actions and development workflows • Build AI-assisted workflows for alert triage, scan analysis, remediation guidance, and evidence collection • Coordinate technical security activities supporting the annual SOC 2 Type II audit • Advance GovRAMP/FedRAMP readiness through NIST SP 800-53 controls mapping, gap remediation, evidence management, and POA&M tracking • Coordinate security incident response, including investigation, containment, recovery, root cause analysis, and documentation • Maintain and test incident response plans and participate in tabletop exercises • Develop and maintain security policies, procedures, and playbooks • Strengthen identity and access security across Microsoft Entra ID SSO, Cloudflare Zero Trust, Auth0, and least-privilege IAM • Maintain a security Risk Register and communicate material risks and recommendations to leadership • Establish security guardrails for company AI adoption, including data protection, vendor risk, and prompt injection awareness • Lead technical security responses for customer questionnaires, RFPs, HECVAT assessments, and vendor due-diligence requests • Support security awareness initiatives, including monthly training and employee education • Mentor technical teams and partner with Product, Engineering, Support, and other departments • Translate complex security risks into clear, actionable recommendations for technical and nontechnical audiences

🎯 Requirements

• 5+ years of experience in security engineering, cloud security, or a closely related field • Proven track record securing AWS workloads, including VPCs, Security Groups, IAM, GuardDuty, CloudTrail, KMS, and Secrets Manager • Hands-on experience with EDR platforms (CrowdStrike preferred), vulnerability management (Qualys or similar), SIEM/MDR operations, and application security scanning (Snyk or similar) • Working knowledge of SOC 2 Type II and NIST SP 800-53 • Practical experience using AI tools to improve security or technical workflows, with sound judgment about data protection and risk • Ability to write scripts using Python, PowerShell, or Bash • Understanding of identity and access management, least-privilege principles, and modern Zero Trust practices • Ability to independently manage projects, prioritize competing security risks, and coordinate work across teams • Clear and confident communication with engineers, executives, auditors, and customers • Experience with modern DevOps and CI/CD security practices, including GitHub Actions and automated security testing • Applicants must be legally authorized to work in the United States • RTA is unable to provide employment visa sponsorship • Preferred: GovRAMP or FedRAMP experience • Preferred certifications: CISSP, CISM, CCSP, OSCP, Security+, AWS Security Specialty, or other AWS certifications • Preferred experience with CJIS, PCI, HIPAA, Terraform/CloudFormation, Cloudflare Zero Trust, Microsoft Entra ID, Kubernetes RBAC, and AI/LLM integrations

🏖️ Benefits

• 401(k) with 6% Safe Harbor match (100% vested day one) • Flexible PTO model built on trust and manager-approved time off • Cigna PPO and HSA medical plan options with company contributions ($780–$1,950 annually) • Garner Health HRA program: up to $1,000 individual / $2,000 family reimbursement opportunity • Wellness rewards up to $350 annually • Virtual care and mental health support resources • Company-sponsored dental, vision, EAP, life, STD, LTD, legal plan, and identity theft protection options • Additional employee perks, wellness initiatives, and discount programs • Fully remote work • Minimal travel, generally up to 10% based on business needs • Reasonable accommodations for qualified individuals with disabilities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume