Senior Security Engineer

Job not on LinkedIn

🔥 6 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Wpromote

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2001

📣 Marketing

Marketing

Wpromote is a digital marketing agency that focuses on transforming businesses through innovative marketing strategies. They provide a wide range of services including paid media, SEO, content marketing, social media, and influencer marketing. Wpromote leverages proprietary technology and data-driven insights to optimize business growth and marketing performance. Their approach is agile and outcome-focused, emphasizing strategic planning, conversion rate optimization, and business intelligence. Wpromote aims to help businesses unlock their data and predict future opportunities, working with category leaders and startups to outsmart the competition through creative solutions. The agency is recognized for its innovative approach and impact on client profitability, stressing the importance of data usage and strategic marketing planning.

📋 Description

• Drive the design, implementation, and continuous advancement of Wpromote's security engineering program • Shape security decisions in partnership with IT leadership and report to the Director of IT • Serve as a senior security presence and point of escalation across the security function • Evaluate, integrate, and rationalize the security tooling portfolio • Design identity, access, and session governance across Google Workspace and additional identity providers • Define GCP security requirements and translate them into Cloud IAM, organization policy, service account governance, and audit logging controls • Advance phishing-resistant MFA, secrets-management architecture, SAML SSO, SCIM provisioning, and session policy • Own OAuth app vetting, token lifecycle and revocation, and third-party application risk management • Own incident response and forensic practice, independently run investigations, and coordinate external partners during major escalations • Implement detection, policy, configuration, and response automation as version-controlled, peer-reviewed, and tested code • Partner with platform engineering on Terraform and cloud guardrails • Mentor and develop team members and inform security decisions across the organization

🎯 Requirements

• 5+ years of hands-on security engineering experience in a professional environment • Track record of owning security architecture and projects end to end • Detection engineering experience, including selecting, building, and operating a SIEM; writing and tuning detections; and owning log pipelines, alerting, and monitoring • 4+ years of hands-on security cloud engineering; GCP strongly preferred, including Cloud IAM, organization policy, service account governance, and audit logging • Deep identity and access management expertise, including SAML SSO federation and SCIM provisioning and deprovisioning • SaaS identity security expertise, including phishing-resistant MFA, passkeys, hardware keys, secrets-management architecture, OAuth app governance, token lifecycle, and third-party application risk • Hands-on incident response and forensic methodology, including sound evidence handling • Endpoint security posture experience, including EDR operations such as CrowdStrike Falcon or equivalent and device-trust or conditional-access design • Experience operating vulnerability management or exposure management programs, including prioritization by exploitability, asset criticality, and business risk • Security automation and infrastructure-as-code fluency, including detection-as-code and Terraform, beyond ad hoc scripting • Position is not eligible for immigration sponsorship • Nice-to-have: infrastructure, cloud platform, DevOps, SRE, or systems engineering background • Nice-to-have: experience scaling or maturing a security program in a fast-growing environment • Nice-to-have: industry certifications such as GCP Professional Cloud Security Engineer, GIAC, CISSP, or OSCP • Nice-to-have: least-privilege access management across vendor systems, mentoring experience, SOC 2 or similar compliance frameworks, and Python or Bash scripting

🏖️ Benefits

• Unlimited PTO • Extended Holiday break (Winter) • 100% paid parental leave • 401(k) matching • Medical, Dental, Vision, Life, Pet Insurance • Sponsored life insurance • Short Term Disability insurance and additional voluntary insurance • Annual Class Pass credits • Remote work flexibility • Office hubs in Los Angeles, Chicago, and New York for learning and development opportunities, events, workspace, and in-person collaboration