Security Engineer / Lead

About the role

We are seeking a hands‑on Senior Security Engineer to own and evolve our internal security ecosystem across endpoints, identities, networks, cloud and on‑prem infrastructure, R&D labs and isolated production environments. Working closely with an external CISO, IT, DevOps and R&D teams, you will act as the technical authority for security architecture, incident investigation and automation.

Key responsibilities

• Design and implement security architecture and network segmentation for R&D, HPC, cloud (AWS/GCP), Kubernetes, on‑prem and air‑gapped environments.
• Own identity security, including IAM, SSO/MFA, service accounts, privileged access management and lifecycle visibility.
• Establish asset visibility and operate EDR/XDR, SIEM/log pipelines, MDM, vulnerability management and system hardening.
• Protect sensitive R&D data with DLP, PKI, secrets controls and improve backup, recovery and ransomware resilience.
• Build detections, lead incident response, containment and remediation while driving continuous improvement.
• Automate threat enrichment, evidence collection and response actions using Python, PowerShell, Bash and modern APIs/agentic AI workflows.

Required profile

• Minimum 4 years of hands‑on security experience in a commercial high‑tech environment (military background a plus).
• Proven ability to operate in complex R&D, isolated or high‑performance computing settings.
• Problem‑solver mindset with strong communication and collaboration skills.

Required skills

• Deep expertise in endpoint, identity, network and detection across Linux and Windows.
• Practical experience with cloud platforms (AWS, GCP), Kubernetes, Terraform and CI/CD security integration.
• Hands‑on with SIEM/log pipelines, EDR/XDR, MDM solutions (Intune, Jamf), IAM/SSO/PAM, ZTNA and vulnerability management tools.
• Strong scripting/programming in Python, PowerShell and Bash; API integration and security automation.