Senior Security Engineer - Gormat

The Senior Security Engineer plays a critical role in designing, implementing, and maintaining the security infrastructure of the organization. This position is responsible for ensuring the confidentiality, integrity, and availability of enterprise systems and data across on-premises and cloud environments.

The ideal candidate possesses deep expertise in cybersecurity threats, tools, and frameworks and has the ability to develop and oversee enterprise-level defenses that mitigate risk and improve the organization's security posture. The Senior Security Engineer works across multiple domains, providing architectural oversight, embedding security into the systems development lifecycle, reviewing code and scripts, testing security implementations, and managing the deployment and optimization of security platforms.

This role collaborates closely with IT Operations, SOC Analysts, Vulnerability Management teams, Engineering, DevOps, and leadership to align security initiatives with business and mission requirements. By leveraging automation, secure design, and defensive strategies, the Senior Security Engineer ensures robust protection against evolving threats while maintaining compliance with federal and industry standards.

Key Responsibilities

• Provide architectural and design oversight to ensure enterprise security requirements are met across all systems.
• Serve as a Subject Matter Expert on enterprise security architecture and ensure designs align with mission, business, and compliance requirements.
• Translate organizational security goals into technical requirements for infrastructure and applications.
• Evaluate enterprise cybersecurity architecture effectiveness and recommend improvements.
• Oversee the deployment, configuration, and management of enterprise security platforms, including SIEM, IDS/IPS, logging, UAM, EDR, SOAR, Elastic Search, and encryption technologies.
• Assess, test, select, and integrate security tools with an emphasis on scalability and automation.
• Conduct security testing and evaluation for new platforms and integrations.
• Perform vulnerability scanning, analysis, and reporting to identify enterprise security weaknesses.
• Recommend mitigations and track remediation efforts across teams.
• Ensure effective system hardening, patch management, and configuration management practices.
• Collaborate with SOC and Incident Response teams to triage, investigate, and mitigate threats.
• Identify anomalous activity and potential threats using logs, network data, and defensive tools.
• Develop and refine content for SIEM and cyber defense platforms.
• Create dashboards and reports that improve visibility into the organization's security posture.
• Build and maintain automated scripts and processes for monitoring, alerting, and remediation.