Senior Security Engineer

As a Senior Security Engineer, you will be part of the global security & compliance team. This team takes care of corporate security, including IT and Cloud security, as well as the full compliance program of Kiteworks. As Kiteworks sells secure communication and collaboration products, security and compliance are top priorities for the company. Kiteworks has many security certifications and assurance reports, and as the business expands to new jurisdictions, they will need to get more certifications in the coming years.

As a senior member of the team, you will directly report to the Global IT CISO and are expected to work independently as well as take the lead on team projects. Although the role requires you to work on many things simultaneously, one of the core focuses is on Cloud Security. Kiteworks has a large cloud environment hosting multiple single tenant and multi-tenant products and internal IT in AWS. The Senior Security Engineer is expected to take the lead on cloud security, including vulnerability management, misconfiguration management, logging, and incident detection.

Additionally, the role will include IT security recommendations, Incident response, support during audits, and security reviews of internal IT projects, including AI projects such as chatbots and vibe coded applications.

What you'll do:

• Lead the way on Cloud Security.
• Maintain and improve our Orca Security implementation
• Vulnerability and security misconfiguration management
• Implement ways to prevent, detect, and respond to threats
• Improve our SIEM
• Assist with security incidents
• Security reviews on new technologies, including AI projects.
• Share insights on technical risks with the Global IT CISO and management.
• Advise the CloudOps and internal IT team on security best practices
• Increase security awareness and knowledge of your colleagues

What you'll bring:

• 5+ year experience as a security engineer
• Blue team experience - you hold the fort
• Experience with a cloud-based infrastructure in AWS & containers
• Experience with AWS security best practices and security products including GuardDuty, Security Hub, CloudTrail
• Experience with vulnerability management
• Experience with Orca Security
• Experience with threat management and intrusion detection
• Experience with SIEM products
• Experience with DevOps or DevSecOps
• Experience with Terraform and scripting
• Affinity with AI and the security challenges related to AI
• If it ain’t automated, it ain’t fixed
• You are a self-starter, but know how to involve your stakeholders
• Teamplayer
• Creative problem solving