Rctsglobal Com

Rctsglobal Com

ThriveWorks - Sr Security Engineer (Copy)

Remote, USA · Senior

Sponsorship not specifiedDetected 327 days ago
AWSGCPAzureCloud PlatformsKubernetesTerraformCI/CDLinuxDevOpsCybersecuritySIEMDetection EngineeringIncident ResponseComplianceProcurementFirewallZero TrustHIPAACollaborationProblem Solving

About the role

  • This role will focus on proactively protecting systems, networks, and applications from internal and external threats while ensuring compliance with industry regulations and best practices.

Responsibilities

  • Monitoring & Incident Response · Lead incident response efforts including triage, investigation, containment, eradication, and lessons learned. · Maintain and tune threat detection systems (SIEM, EDR) to ensure actionable alerts and timely response. · Conduct root cause analysis on security incidents and develop playbooks for repeatable, automated response.
  • Vulnerability & Risk Management · Perform regular vulnerability assessments and penetration tests; track remediation and provide executive-level reporting. · Conduct risk assessments and support audit activities (HIPAA, PCI-DSS, NIST, ISO 27001). · Work with DevOps/IT to validate secure configurations, patch management, and system hardening.
  • Governance, Compliance & Training · Develop and enforce security policies, procedures, and standards aligned to industry frameworks. · Support compliance efforts across internal stakeholders and external auditors. · Deliver security awareness and secure coding training to engineering and business teams.
  • Cross-Functional Collaboration · Partner with IT, Legal, HR, and business units to align security initiatives with organizational goals. · Participate in software development lifecycle (SDLC) and CI/CD pipeline reviews to ensure security-by-design. · Advise procurement teams on security requirements for third-party vendors and SaaS solutions.

Requirements

  • The ideal candidate will possess a strong technical background, excellent problem-solving skills, and the ability to communicate effectively across departments.

Nice to have

  • SIEM (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike, Defender), and vulnerability scanners (e.g., Tenable, Qualys).

Company info

  • We are seeking an experienced and highly motivated Senior Security Engineer to lead the design, implementation, and management of our organization's security infrastructure.

This listing is sourced directly from Rctsglobal Com's careers page and normalized into a canonical job model.