Vice President Security Engineer, Galaxy

• The ideal candidate has strong experience securing enterprise communications, protecting sensitive data, managing privileged access, and implementing practical security controls across modern enterprise environments
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
• 6+ years of experience in cybersecurity, security engineering, infrastructure security, or related roles
• Experience administering or supporting enterprise email security, data protection, privileged access management, infrastructure access management, or related security technologies
• Experience working with enterprise security controls including identity and access management, endpoint security, security monitoring, and incident response
• Familiarity with cloud platforms such as AWS, Azure, or Google Cloud
• Understanding of Zero Trust principles, least privilege access models, identity security, email security, infrastructure access security, and data protection concepts
• Experience with scripting or automation using PowerShell, Python, Bash, or similar technologies
• Security certifications such as Security+, CISSP, GIAC, cloud security certifications, or equivalent experience are a plus
• Strong troubleshooting, analytical, and problem-solving skills
• Excellent written and verbal communication skills

Desirable

• We are seeking a highly motivated and technically skilled Security Engineer to join our Security Operations team
• This role is primarily responsible for the administration, engineering, and continuous improvement of the organization’s enterprise email security, email-based Data Loss Prevention (DLP), and Privileged Access Management (PAM) capabilities
• The Security Engineer will play a critical role in protecting business communications, sensitive data, privileged accounts, and critical systems while helping strengthen the organization’s overall security posture
• In addition to owning these core security platforms, the Security Engineer will support broader security operations, infrastructure security, incident response, cloud security, and security engineering initiatives. This role works closely with Security Operations, Infrastructure, Cloud Engineering, IT, and Engineering teams to implement security best practices, improve operational resilience, and support ongoing security projects
• Administer and support enterprise email security platforms and threat protection technologies
• Configure, tune, and maintain anti-phishing, anti-spam, malware detection, impersonation protection, and email filtering controls
• Administer and optimize email-based Data Loss Prevention (DLP) policies, monitoring, and enforcement capabilities
• Investigate email security alerts, phishing incidents, business email compromise attempts, and DLP events, coordinating remediation efforts as needed
• Collaborate with business and security stakeholders to identify, classify, and protect sensitive information
• Support data protection initiatives across email, SaaS platforms, cloud services, endpoints, and collaboration tools
• Develop and maintain security controls that reduce the risk of data exposure through business communications and user workflows
• Administer, maintain, and enhance enterprise privileged access management and infrastructure access security platforms
• Support secure access solutions for administrators, internal users, contractors, and third parties
• Manage identity-aware access controls for infrastructure, cloud environments, administrative systems, and critical resources
• Partner with Infrastructure and Identity teams to support authentication, authorization, and least-privilege access models
• Support secure access controls across cloud and on-premises environments, including servers, databases, Kubernetes clusters, and other critical infrastructure
• Participate in access reviews, entitlement validation, and privileged account governance initiatives
• Assist with the implementation and continuous improvement of Zero Trust access controls and infrastructure access security practices
• Administer and support enterprise security technologies including identity, endpoint, monitoring, logging, and cloud security platforms
• Support onboarding, configuration, integration, and troubleshooting of security tools and services
• Monitor platform health, operational performance, and security control effectiveness
• Collaborate with Infrastructure and IT teams to ensure security controls remain properly configured and maintained
• Assist with implementation and operationalization of new security technologies and security initiatives
• Support the Security Operations team in monitoring, detecting, investigating, and responding to security incidents
• Participate in incident investigations, root cause analysis, containment, and remediation activities
• Assist with threat detection, vulnerability remediation, and continuous monitoring efforts
• Support investigations involving identity systems, cloud environments, enterprise applications, and business-critical platforms
• Assist with automation of operational and security processes using scripting, APIs, or workflow automation tools
• Participate in platform evaluations, security assessments, and infrastructure hardening initiatives
• Work closely with Engineering, Infrastructure, and IT teams to improve enterprise security controls
• Contribute to security projects and operational initiatives as business needs evolve
• Evaluate emerging security technologies and opportunities to improve operational efficiency and security effectiveness
• Support compliance initiatives related to SOC 2, ISO 27001, PCI-DSS, and other applicable regulatory frameworks
• Assist with maintaining security documentation, standards, procedures, and operational runbooks
• Participate in audit preparation, evidence collection, and remediation activities
• Support governance efforts related to identity security, privileged access controls, and data protection requirements