Senior Security Engineer
Lafayette, IN - USA
Job Summary
KPA is seeking a Senior Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology. This role owns KPAs security platforms cloud security identity automation and technical security initiatives. The ideal candidate is a hands-on security engineer with strong cloud and infrastructure experience who can independently lead complex security projects partner effectively with IT Operations and DevOps and continuously improve KPAs security posture.
- Own KPAs enterprise security platforms including CrowdStrike Rapid7 (InsightIDR InsightVM InsightAppSec MDR) Cisco Umbrella Cisco Duo KnowBe4 and related technologies.
- Lead vulnerability management and remediation endpoint security identity security privileged access penetration testing and security hardening initiatives.
- Lead security incident response investigations containment remediation and post-incident reviews.
- Own the ongoing operation of SOC 2 controls security audit requirements and technical compliance initiatives.
- Own Cisco Meraki security VPN infrastructure network security controls and secure cloud connectivity.
- Secure Azure AWS Microsoft 365 Entra ID AWS Identity Center Auth0 and cloud-native workloads using modern security best practices.
- Administer and improve identity governance across Microsoft Entra ID Cisco Duo AWS Identity Center Auth0 SSO SCIM Conditional Access PIM privileged accounts service accounts and authentication architecture.
- Partner with DevOps to integrate security into CI/CD pipelines Infrastructure as Code containers Kubernetes and cloud workloads including SAST DAST Snyk and other application security technologies.
- Own and continually improve KPAs cloud security posture management workload protection identity controls logging alerting detection engineering and remediation processes.
- Own email security across Microsoft 365 SendGrid Amazon SES SPF DKIM DMARC and phishing protection.
- Build security automation using PowerShell Python Microsoft Graph REST APIs and AI-assisted development.
- Lead security assessments for new vendors SaaS platforms cloud services and third-party integrations; administer third party vendor management (TPVM) and support ongoing vendor risk management.
- Administer and improve KPAs security awareness program security policies standards and technical procedures.
- Support AI security and governance initiatives including ChatGPT Enterprise Claude MCP and emerging AI technologies.
- Support security architecture reviews for new cloud services platforms integrations and technical initiatives.
- Proactively identify security gaps technical debt and opportunities to improve KPAs security posture through automation AI and modern engineering practices.
- 5 years of experience in security engineering cloud security infrastructure security or a related senior technical role.
- Strong knowledge of identity security endpoint security vulnerability management network security incident response and zero trust principles.
- Experience securing Azure AWS Microsoft 365 Entra ID Windows and Linux.
- Familiarity with CI/CD pipelines Kubernetes container security application security scanning and DevSecOps practices.
- Scripting and automation experience using PowerShell Python REST APIs or similar technologies.
- Experience supporting SOC 2 & NIST CSF or comparable security and compliance frameworks.
- Relevant certifications such as CompTIA Security CISSP CCSP AWS Certified Security or equivalent certifications are preferred.
- Excellent communication documentation project leadership and problem-solving skills.
- Bachelors degree in Computer Science Information Technology or Cybersecurity or equivalent experience.
- Work ethic that aligns with KPAs core values:
- Trust: earning trust through integrity expertise and acting in the clients best interest.
- Innovation: continuously seeking out ways to better serve clients.
- Excellence: holding ourselves to high standards in everything we do.
- Results: moving with purpose to deliver meaningful outcomes.
- Owns and continually improves KPAs enterprise security platforms and technical security controls.
- Improves KPAs security posture across endpoints identity networking cloud and DevOps environments.
- Delivers complex security initiatives with strong planning communication documentation testing and post-implementation validation.
- Reduces manual security work through automation and modern engineering practices.
- Serves as the senior escalation point for complex security incidents and technical security issues.
- Partners effectively with IT Operations and DevOps to embed security into operational and development workflows.
- Working at a computer typing and view a screen - Constantly
- Stationary sitting or standing - Constantly
- Visual Recognition - Constantly
- Hearing/Listening - Occasionally
- Communicating verbally and/or in writing - Occasionally
- Travel - Seldom
- Annual base salary range between $110-130k commensurate with experience.
- Bonus potential of 10% annually
Required Experience:
Senior IC
About Company
Improve safety and stay compliant. Learn why 10,000 companies trust KPA EHS Software and consulting to keep their companies safe.