Security Engineer

Tasks

• Design, build, and operate security platform services such as policy, database, and cloud services
• Build and maintain security systems such as risk management, threat detection, incident response, and compliance monitoring
• Integrate the platform with security systems such as IT systems, network tools, and security tools, and develop
• Define and develop the technical strategy for security systems and services
• Create and maintain technical documentation for security systems and services
• Work with cross-functional teams to ensure that security systems and services meet business needs
• Provide technical leadership and mentorship to the security engineering team
• Stay up to date with the latest security trends and technologies
• Implement security best practices and standards
• Monitor and report on the organization's security posture
• Respond to security incidents and perform root cause analysis
• Develop and test security countermeasures
• Participate in the development of security policies and procedures
• Conduct security audits and assessments
• Provide security training and awareness to staff
• Manage and maintain the security infrastructure
• Develop and maintain security tools and scripts
• Collaborate with other teams to improve the overall security posture
• Stay informed about emerging security threats and vulnerabilities
• Provide security and enablement application tools and an agent developer within the platform, along with documentation that empowers the team to be self-sufficient
• Build logging, metrics, and alerting for platform services and continuous IAM detection rules

Requirements

• Hands-on experience building and operating production services using Python
• Extensive experience in debugging, Linux, and professional computer science
• Extensive understanding of monitoring, authentication, and access management: SSO/OAM, Active Directory, and SAML protocols
• Experience with Infrastructure as Code using Terraform, Ansible, and/or Red Hat OpenShift
• Demonstrated understanding of observability using z (e.g., Prometheus, Grafana) and/or DataDog
• Experience with related project work, including building monitoring dashboards and daily runbooks
• Clear communication and a structured approach to resolving road-related issues
• Extensive knowledge of access control systems, identity management, administrative controls, and network visibility
• Policy and access control using OPA, VPP, Skybox, Zscaler, and Dynatrace
• Strong knowledge of AWS
• An engineer with expertise in IAM, CLI, API, Terraform or similar, and Golang
• Exposure to the field, such as building high-performance services where performance is a key selection criterion
• Experience with advanced IT software on AWS, Azure, or GCP

We offer

• Medium-sized office on the Offutt campus with easy access to transportation and amenities
• Flexible work model
• Competitive compensation package
• 5-Day Work Week Structure
• Occasional remote work is possible
• Employee Assistance Program
• Advanced Benefits
• Optional paid sabbaticals for long service and volunteering
• Multi-day leave
• Opportunities for on-site shared development retreats across hubs
• Attendance at conferences and involvement in the open-source community