Staff Security Engineer

About the role

We are looking for a Staff Security Engineer to lead the design and operation of a multi‑tenant security platform serving hundreds of client environments. This senior technical leader will shape strategy, drive automation, and act as the ultimate escalation point for complex incidents.

Key responsibilities

• Architect and maintain isolated, scalable security stacks (SIEM, EDR, XDR) across diverse client environments, using CIS and NIST baselines.
• Serve as the final technical escalation point for Tier‑4 incidents, leading root‑cause analysis and fleet‑wide preventative measures.
• Develop security‑as‑code automation with Python, PowerShell, Terraform and Ansible to orchestrate threat containment and patch management.
• Lead vendor evaluations and define global standard offerings, creating “Gold Image” deployment templates.
• Provide strategic vCISO advisory for key accounts and oversee compliance evidence collection for HIPAA, SOC 2 and CMMC.

Required profile

• 8‑12+ years of information security experience, including 3+ years in multi‑client consulting or MSP environments.
• Proven ability to lead cross‑functional projects and mentor senior engineers without direct‑report authority.
• Excellent bilingual communication skills, able to translate technical findings for both engineers and C‑suite executives.

Required skills

• Expert‑level AWS and Azure security, Zero Trust Architecture, IAM/Entra ID.
• Advanced SIEM/SOAR engineering (Sentinel, Splunk, CrowdStrike) and MITRE ATT&CK mapping.
• Network defense expertise: deep‑packet inspection, BGP security, SD‑WAN, SASE, micro‑segmentation.
• Automation/IaC: Python, PowerShell, Terraform, Ansible.
• Relevant certifications such as CISSP, CISM, CCSP or GIAC (GCIH/GCFA) are highly preferred.