Senior Security Engineer, Progyny

• Bachelor's degree in computer science, Information Security, or a related field experience
• 4 years of experience in cybersecurity, with a focus on cloud platforms (AWS, Azure, or GCP) and cloud networking tools
• Strong understanding of networking protocols, architectures, and best practices
• Demonstrated experience with SIEM development and monitoring
• Familiarity with AWS and Azure hardening techniques and best practices
• Proficiency in system design concepts and their application to cybersecurity
• Relevant certifications such as CISSP, CCSP, or AWS Solutions Engineer are highly preferred
• Working knowledge of HIPAA or common compliance standards like PCI, SOX, or NIST
• Excellent communication, leadership, and problem-solving skills

Desirable

• The Senior Security Engineer will be a key contributor in the architecture and deployment of systems and procedures to protect the organization's IT systems and software from malicious activity and technology breaches
• This is a hands-on role that is responsible for identifying and remediating issues that can put the security and reliability of technology systems at risk
• While it is important to work as a member of the team, this role is expected to use their background and experience to identify areas of improvement and to push for solutions to found weaknesses
• Design, implement, and maintain a robust and secure infrastructure across AWS, Azure, and on-premises environments ensuring alignment with industry best practices and regulatory requirements
• Develop and monitor SIEM solution to identify, track, and respond to security incidents in real-time
• Implement AWS hardening measures to minimize security risks and maintain a secure environment
• Evaluate and optimize system design concepts to maximize security and efficiency, while minimizing potential vulnerabilities
• Lead initiatives to establish, enhance, or mature security processes, policies, and standards throughout the organization
• Collaborate with engineering teams to design and implement security solutions for new and existing products or services
• Act as a subject matter expert on cloud and networking security, providing guidance and support to other teams as needed
• Stay current on the latest security trends and emerging threats, recommending appropriate mitigation strategies to address potential risks
• Conduct regular security assessments, audits, and penetration tests to identify and remediate vulnerabilities
• Provide training and mentorship to team members, fostering a culture of security awareness and continuous improvement
• Contributes to the long-term information security roadmap
• Participates in tabletop exercises related to incident response and disaster recovery procedures