Senior Security Engineer

Job summary

This role involves hands-on security and compliance responsibilities within a modern SaaS environment, focusing on AWS and IoT platforms. The position requires a balance of technical implementation and governance, risk, and compliance (GRC) work, particularly in the maritime industry.

Qualifications

• Extensive knowledge and practical experience in software development, infrastructure, IoT, CI/CD, Kubernetes/EKS, and Infrastructure as Code (IaC) using Terraform.
• Strong expertise in AWS cloud services, which is the primary hosting platform.
• Interest or experience in AI security, including securing AI systems or leveraging AI to enhance security operations.
• Background in Information Security with a focus on both GRC and technical execution.
• Familiarity with security frameworks (SOC 2, ISO 27001) and regulations (GDPR, NIS2).
• Relevant certifications such as CISSP, CISM, AWS Security Specialty, or equivalent.
• Strong communication and collaboration skills, capable of engaging with both technical and non-technical stakeholders.
• Willingness to learn and adapt on the job.

Responsibilities

• Design, implement, and manage security controls on AWS, EKS, and IoT infrastructure, integrating automated security scanning into CI/CD pipelines.
• Monitor and address vulnerabilities across the platform, acting as the technical security expert.
• Lead incident response efforts, from triage to remediation and post-incident analysis.
• Develop a framework to ensure the AI platform is secure and compliant by design.
• Maintain security policies and standards, interpreting regulations to guide control application.
• Automate compliance evidence collection through the GRC platform and facilitate smooth external audits.

Skills

• Proficiency in AWS and cloud security practices.
• Experience with security frameworks and compliance standards.
• Strong technical skills in security controls and incident response.

Education

• Relevant certifications in Information Security are preferred.

Tools

• Familiarity with GitHub Actions, Vanta for GRC, and AI security tools.