Staff Security Engineer
At a glance
Senior Security Engineering role at Red Cup IT, Inc. Remote, United States · full-time · no salary stated · we estimate $134,400–$185,713.
Red Cup IT, Inc. has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Design isolated SIEM, EDR and XDR environments that can scale across a large client portfolio
- Test security vendors and set standard offerings, then build CIS- and NIST-based deployment baselines
- Take the SOC’s toughest escalations, investigate complex breaches and turn findings into broader safeguards
- Automate containment and patching with Python, PowerShell and Terraform, including integrations across security tools
- Advise key accounts on risk and oversee technical evidence for HIPAA, SOC 2 and CMMC audits
What you bring
- Eight or more years in information security, including at least three years in multi-client consulting or MSP work
- Deep AWS or Azure security expertise, with experience in security operations and identity controls
- Hands-on automation experience with Python, Terraform or Ansible
- A record of leading cross-team projects and mentoring senior engineers without managing their reporting lines
Who this fits
This is a senior, hands-on technical leadership role for someone who prefers engineering and architecture work over people management. You’ll need to move between detailed technical reviews and business-focused risk discussions with executive stakeholders.
From the employer
We are seeking a Staff Security Engineer who operates at the nexus of high-level strategy and multi-tenant operational excellence. While a traditional internal role secures a single enterprise perimeter, you are responsible for the integrated defense fabric of a vast portfolio of diverse client environments.
You will navigate the complexities of varied compliance needs and legacy technical debt, transforming them into a unified, scalable security posture. This is a technical leadership role designed for an expert who prefers the keyboard and the whiteboard over a people-management track, focusing on the "big picture" of our global security product stack.
Core Responsibilities
1. Strategic Security Architecture & Product Strategy
- Scalable Multi-tenancy: Architect and maintain hardened, isolated security stacks (SIEM, EDR, XDR) designed to scale across hundreds of distinct client environments.
- Product Vetting: Serve as the technical lead for vendor evaluations, "battle-testing" emerging tech to define our global standard offerings.
- Global Standardization: Engineer "Gold Image" baselines and automated deployment templates based on CIS and NIST frameworks to ensure rapid, secure onboarding.
2. Tier 4 Escalation & Forensic Mastery
- Final Authority: Serve as the ultimate technical escalation point for the SOC, leading the response to sophisticated APTs and complex breaches.
- Post-Mortem Leadership: Conduct deep-dive Root Cause Analysis (RCA) and translate incident findings into systemic, fleet-wide preventative measures.
3. Security Engineering & Hyper-Automation
- Security as Code: Build the automation tissue that connects our stack, utilizing Python, PowerShell, and Terraform to automate threat containment and patch management.
- Integration Engineering: Develop custom API integrations to bridge gaps between vulnerability scanners, RMM tools, and ticketing systems for seamless auto-remediation.
4. High-Stakes Advisory & Governance
- Strategic vCISO: Act as a high-level advisor for key accounts, translating abstract risk into actionable business roadmaps for C-suite stakeholders.
- Compliance Orchestration: Oversee technical evidence collection and governance for HIPAA, SOC 2, and CMMC, ensuring our clients remain audit-ready.
Technical Profile
CategoryCompetenciesCloud & IdentityExpert-level AWS/Azure security; Zero Trust Architecture (ZTA); Advanced IAM/Entra ID.SecOps & IntelligenceAdvanced SOAR/SIEM engineering (Sentinel, Splunk, CrowdStrike); MITRE ATT&CK mapping.Network DefenseDeep-packet inspection; BGP security; SD-WAN; SASE; Micro-segmentation.Automation / IaCProficiency in Python, Terraform, or Ansible for infrastructure-as-code.CertificationsCISSP (Highly Preferred), CISM, CCSP, or specialized GIAC (GCIH/GCFA).Experience & Qualifications
- 8–12+ Years in Information Security, with a significant background (3+ years) in multi-client consulting or MSP environments.
- Force Multiplier: Proven track record of leading cross-functional projects and mentoring senior engineers without direct-report authority.
- Bilingual Communication: The rare ability to pivot from a deep-dive technical audit with an engineer to a risk-based ROI presentation for a CEO.
Security Engineering work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security EngineeringRemote
Find me workBy the team behind remoteroles.