Blue Chip Talent, in partnership with a technology-driven organization, is seeking a skilled Senior Security Engineer. This role is responsible for leading security initiatives across application, cloud, and infrastructure environments while driving vulnerability management and secure system design. The ideal candidate brings deep expertise in one domain with strong working knowledge across the broader security landscape.
Job Duties
- Perform vulnerability assessments and drive remediation efforts across applications, cloud, and infrastructure
- Analyze threat intelligence to identify risks and strengthen defensive strategies
- Implement and enforce secure cloud configuration standards across environments
- Design and support application security practices including code and architecture reviews
- Manage and enhance identity and access management (IAM) controls and policies
- Collaborate with engineering and operations teams to integrate security best practices
- Monitor and improve security posture across systems, networks, and platforms
- Support incident response efforts and security investigations as needed
Skills Required:
- 10+ years of experience in cybersecurity, information security, or related field
- Subject matter expertise in at least one: Application Security, Cloud Security, or Security Operations/Infrastructure
- Working knowledge across application, cloud, and infrastructure security domains
- Experience with vulnerability assessment tools and remediation processes
- Hands-on experience with IAM frameworks and access control models
- Knowledge of secure cloud configurations (AWS, Azure, or GCP)
- Experience with threat intelligence tools and methodologies
Desired
- Expertise spanning multiple core areas (Application Security, Cloud Security, Infrastructure/SecOps)
- Experience with security automation and tooling
- Familiarity with compliance frameworks (e.g., NIST, ISO, CIS)
- Experience securing containerized or microservices architectures
- Advanced certifications (e.g., CISSP, CCSP, CEH)
- Experience with SIEM, EDR, or security monitoring platforms
- Exposure to DevSecOps practices and CI/CD security integration
