Senior Security Operations Engineer

[…] is seeking a hands-on Senior Security Operations Engineer to assess and improve the security of our applications, cloud environments, development practices, identities, data, and operational tooling.

This role will establish practical security standards, build and harden shared security controls, investigate risk, and review security-impacting implementations produced by reliability, recovery, DevOps, and application teams. System-owning teams remain responsible for remediating their applications and services and for operating routine system-specific controls after enablement.

This is not a role that manually approves every normal software release. Security review will focus on defined risk areas, including changes involving privileged access, sensitive data, recovery systems, network exposure, secrets, infrastructure, authentication, authorization, and security controls.

• Security assessment
• Assess the current security posture across web applications, Flutter mobile applications, APIs, backend services, cloud infrastructure, repositories, CI/CD, databases, and integrations.
• Inventory externally accessible services and endpoints.
• Identify vulnerabilities, insecure defaults, excessive permissions, unmanaged credentials, and control gaps.
• Distinguish confirmed findings from suspected risks and unassessed areas.
• Prioritize findings based on exploitability, potential impact, exposure, an