Security and Compliance Engineer

Overview

Job Title: Security and Compliance Engineer

About the Role: We are seeking a Security and Compliance Engineer to own the design, implementation, and management of security controls across client IT environments. This role focuses on protecting cloud, on-premises, and hybrid systems while supporting regulatory compliance, audits, and incident response. The engineer will collaborate with internal teams and clients to strengthen security posture and ensure operational resilience.

• Design and implement security architectures across cloud, on-prem, and hybrid environments.
• Manage and optimize security tools, including endpoint protection, firewalls, multi-factor authentication, SIEM, and monitoring solutions.
• Conduct vulnerability assessments, risk reviews, and compliance gap analyses.
• Develop and maintain security policies, procedures, and documentation.
• Lead incident response efforts, including threat investigation, containment, and remediation.
• Provide guidance and training on security best practices to clients and internal teams.
• Collaborate with operations and IT teams to ensure secure system integration.
• Continuously improve security processes, tools, and response capabilities.

• 4+ years of experience in cybersecurity engineering or IT security operations.
• Hands-on expertise with cloud platforms (AWS, Azure, GCP) and on-premises environments.
• Experience managing security controls, monitoring, and incident response.
• Strong knowledge of risk management, regulatory frameworks, and best practices.
• Excellent troubleshooting, analytical, and communication skills.
• Ability to work independently and collaboratively across multiple teams.
• Nice to have: industry certifications (CISSP, CISM, CompTIA Security+, GIAC, ISO 27001) or experience in regulated industries.

• Competitive salary and performance-based incentives.
• Comprehensive benefits package, including medical, dental, vision, and 401(k) with company match.
• Professional development support, including training and certification opportunities.
• Hybrid-friendly, collaborative work environment with exposure to diverse client systems.