Senior Security Engineer

a { text-decoration: none; color: #464feb;
}
tr th, tr td { border: 1px solid #e6e6e6;
}
tr th { background-color: #f5f5f5;
}

Senior Security Engineer

Rate: $65/hour

About the Role

Our client is seeking an experienced Senior Security Engineer for a contract engagement to help strengthen and mature key components of its enterprise information security program.

This role will focus on designing and implementing security improvements, developing enterprise security standards, assessing cloud security controls, and leading engineering initiatives that reduce risk while supporting business objectives.

This is an excellent opportunity for a hands-on security professional who enjoys solving complex technical challenges, improving security operations, and delivering measurable security outcomes in a collaborative environment.

---

Key Objectives

During this engagement, you will:

• Develop and publish enterprise security standards for applications, APIs, and web services, including authentication, authorization, encryption, logging, vulnerability management, and secure development practices.
• Conduct comprehensive assessments of cloud security controls, identify security gaps, and deliver prioritized remediation recommendations.
• Design and implement security automation, integrations, and engineering improvements that enhance security visibility, strengthen controls, and reduce manual effort.

---

Key Responsibilities

Security Engineering & Architecture

• Design, implement, and enhance security controls, technologies, and engineering solutions across cloud, application, and infrastructure environments.
• Provide technical security guidance to technology teams, business stakeholders, and project teams.
• Evaluate security architectures, technologies, and vendor solutions, recommending improvements that reduce risk and enhance operational effectiveness.
• Assess and improve cloud security configurations, identity and access management controls, and overall security posture.
• Support secure application, API, and infrastructure implementations across enterprise environments.

Security Operations & Risk Management

• Coordinate security assessments, penetration testing activities, and remediation efforts.
• Support incident response activities through investigation, threat analysis, and remediation guidance.
• Identify security gaps and recommend practical, risk-based mitigation strategies.
• Assist in vulnerability management, risk prioritization, and security control validation activities.

Governance & Program Development

• Develop and maintain security standards, technical requirements, procedures, and supporting documentation.
• Collaborate with internal and external stakeholders to ensure security requirements are incorporated into technology initiatives and projects.
• Promote security best practices across cloud, infrastructure, and application teams.
• Support continuous improvement efforts that strengthen the organization's overall security program.

---

Required Qualifications

• 7+ years of experience in cybersecurity, information security, security engineering, or related technical disciplines.
• Strong background in security engineering, cloud security, application security, and security controls implementation.
• Hands-on experience securing AWS environments.
• Experience with Microsoft Entra ID and identity and access management (IAM) principles.
• Knowledge of application security, API security, secure software development practices, and application security testing.
• Experience implementing security automation, integrations, scripting solutions, or operational improvements.
• Strong understanding of networking, operating systems, virtualization, firewalls, segmentation, remote access technologies, and enterprise security architecture.
• Experience supporting penetration testing, vulnerability remediation, incident response, and threat analysis initiatives.
• Ability to assess technical risk and translate findings into practical business recommendations.
• Strong verbal and written communication skills with the ability to communicate effectively across technical and non-technical audiences.

---

Preferred Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
• Industry certifications such as CISSP, CCSP, GIAC, AWS Security, Microsoft Security, or equivalent credentials.
• Experience developing enterprise security standards and technical security governance frameworks.
• Experience with cloud security reviews, architecture assessments, and security modernization initiatives.
• Familiarity with security tooling, automation frameworks, and cloud-native security controls.