Unstructured is unlimited.
Senior Cybersecurity Engineer
Location
United States
Posted
1 day ago
Salary
0
Seniority
Senior
Job Description
Senior Cybersecurity Engineer
Indico Data
• Improve Indico’s technical security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response. • Partner with the CISO and CTO to turn security priorities into practical technical controls, standards, reviews, and operating processes. • Review Engineering work against security standards, with authority to request changes where needed. • Partner with Engineering on AWS security controls, including IAM, networking, account structure, logging, encryption, key management, backups, production access, and customer-dedicated environments. • Review and improve Kubernetes and container security controls, including workload identity, RBAC, network boundaries, image security, runtime monitoring, and deployment patterns. • Define and improve secure CI/CD patterns, including GitHub permissions, branch protections, privileged workflows, secrets handling, release controls, and deployment access. • Define and oversee processes for vulnerability management, committed-secret response, secure development, incident response, and access control while Engineering, Platform, IT/Ops, and system owners operate them in their domains. • Provide product security support, including secure design review, threat modeling for sensitive features, scanner tuning, and high-risk change review. • Improve detection and response coverage across tools such as CloudTrail, GuardDuty, CrowdStrike, SIEM/logging platforms, vulnerability scanners, and secrets detection. • Own day-to-day security monitoring and response operations, including alert routing, triage expectations, escalation paths, and detection improvements. • Coordinate technical containment during security incidents across Engineering, Platform, IT/Ops, and leadership. • Maintain incident response runbooks and partner with the CISO on severity, executive escalation, counsel/compliance coordination, and customer communication strategy. • Create practical security guidance, standards, procedures, and runbooks for security-sensitive work such as production access, secrets handling, vulnerability remediation, incident response, customer data handling, and secure engineering. • Maintain reusable technical security documentation, standard responses, and evidence packages for customer due diligence and compliance support. • Evaluate security tools and vendors with a focus on technical coverage, operational fit, and reducing manual work. • Build or sponsor lightweight automation, checks, dashboards, and workflows that make security controls repeatable.
Job Requirements
- 6+ years of relevant security experience, ideally in a startup, SaaS, cloud-native, or enterprise software environment.
- Strong hands-on experience with AWS security, including IAM, networking, logging, monitoring, encryption, access controls, and production security.
- Experience securing Kubernetes, containers, CI/CD pipelines, infrastructure-as-code, and modern cloud deployment patterns.
- Strong understanding of identity and access management, least privilege, privileged access, workload identity, and service-to-service permissions.
- Working knowledge of application and product security, including authentication, authorization, secure coding, common web risks, and secure design review.
- Experience defining or operating vulnerability management, secrets management, secure development, access control, or incident response processes.
- Experience with secrets management, cloud key management, encryption design, data residency, threat modeling, or secure SDLC programs.
- Experience with security monitoring, alert triage, incident response coordination, and remediation tracking.
- Experience with Python, Go, Bash, or other scripting languages for security automation.
- Ability to review infrastructure, application, and operational changes for material security risk.
- Strong written and verbal communication skills, including clear technical guidance, standards, runbooks, and customer-facing security documentation.
Benefits
- Remote work supports.
- Flexible working hours.
- Professional development opportunities.
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
Saviynt IAM Specialist
ZensarAt Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus. Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.
Role Description Design and implement IAM solutions using Saviynt. - Installation of Saviynt Connect and configuration - Create custom rules and workflows related to Joiner, Mover, Leaver (JML) processes - Integrate Saviynt with HR systems, Active Directory, Azure AD, Exchange, ServiceNow, and other enterprise applications using out-of-the-box and custom connectors - Develop and document IAM policies, procedures, and standards - Ensure compliance with regulatory requirements and industry best practices - Strong understanding of IAM concepts and best practices - Build custom connectors for onboarding applications - Develop and manage REST API connectors for web applications and authoritative sources like SAP, PeopleSoft, and Workday - Develop and enforce security policies related to identity and access management - Implement periodic access reviews to ensure appropriate access levels - Automate access review processes to streamline compliance checks - Generate reports on access review findings and actions taken - Provide technical support and guidance to internal teams and stakeholders - Conduct training sessions for end-users and IT staff on Saviynt functionalities - Experience with other IAM tools like SailPoint, Okta, or CyberArk - Proficiency in Java and scripting languages (e.g., PowerShell, Python) - Excellent problem-solving and analytical skills - Strong communication and interpersonal skills Qualifications - Experience with IAM solutions, particularly Saviynt - Knowledge of regulatory compliance and industry best practices - Technical proficiency in relevant programming and scripting languages Requirements - Strong understanding of IAM concepts - Experience with integration of IAM solutions with enterprise applications - Ability to develop and enforce security policies - Experience in conducting training sessions Benefits - Inclusive workplace culture - Opportunities for growth and development - Commitment to employee well-being
Director of Security and Network
Pinnacle Treatment Centers, Inc.Addiction Treatment & Healing. Aegis. Recovery Works. HealthQwest. And More. A Pinnacle Family of Companies.
• Serve as Pinnacle's cybersecurity leader and Security Officer while overseeing enterprise networking and infrastructure security initiatives. • Develop and execute Pinnacle's multi-year cybersecurity strategy and roadmap. • Lead information security governance, risk management, compliance, and security operations. • Direct enterprise security monitoring and incident response practices • Conduct security assessments, audits, and risk mitigation initiatives. • Drive security awareness and best practices across the organization. • Partner with Compliance and business leaders to maintain a strong security culture. • Manage and optimize enterprise security technologies including: SIEM platforms, Endpoint Protection (EPP), Data Loss Prevention (DLP), Firewalls, Vulnerability Management, PKI, RADIUS, Network Access Control (NAC). • Lead enterprise LAN, WAN, and wireless networking strategy. • Design and implement scalable, resilient network solutions. • Drive modernization and simplification initiatives across multi-site environments. • Ensure secure connectivity for all Pinnacle facilities and applications. • Lead security strategy and governance for Microsoft 365, Microsoft Azure, Conditional Access, Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), Microsoft Intune, Windows AutoPilot. • Lead and mentor a team of security and network engineers. • Manage vendor partnerships, procurement, and technology investments. • Establish effective escalation and on-call support processes. • Communicate project status and strategic initiatives to executive stakeholders.
• Provide Information Assurance Engineering Support for the Information Technology R&D program. • Analyze emerging R&D Information Systems and Operational Technology. • Review existing and proposed policies for compliance. • Develop standards for implementation of IA/Cybersecurity solutions. • Conduct risk assessments for R&D projects.
• performs a variety of routine project tasks applied to specialized Cybersecurity problems • involves integration of electronic processes or methodologies to resolve total system problems • analyzes information security requirements • provides security engineering support for planning, design, development, testing, demonstration, and integration of information systems
