Senior Security Engineer

We’re hiring a Senior Security Engineer to be the dedicated security owner for our Azure platform — running security reviews, keeping our policies and posture current, driving detection and incident response, owning identity and endpoint security, and running our SOC 2 / Drata compliance program day to day. You’ll report to our Security Lead and operate as a senior individual contributor focused squarely on security and compliance.

This is deliberately a security specialist role, not a security-plus-everything generalist . Day-to-day infrastructure and ops build work — including shipping infrastructure as code — is covered by our team today, with a dedicated DevSecOps hire planned down the road. You’ll define the security requirements and review how they’re implemented, but you won’t be on the hook for building and operating the platform.

The compliance side of this role is a deliberate pairing with security, and may grow into its own function as we scale.

• Security reviews & posture. Review architecture and changes for security impact, keep our security baselines and policies current, and run posture management across the environment (Defender for Cloud), driving findings through to remediation.
• Detection & incident response. Own detection engineering and IR day to day — KQL detections in Log Analytics, Azure Monitor dashboards, SIEM forwarding via Event Hub, and incident.io alerting and runbooks. The Security Lead steps in as incident c