Bitsight

Security Engineer- Corporate Security

Rol remoto de Security Engineering con fit claro de ubicación del candidato.

Publicado23 jul 2026

Países elegibles1 país aceptado

Señal de seniorityMiddle

Modelo de trabajoRemoto

Ubicaciones aceptadas para candidatos

Estados Unidos

Resumen del rol

Contenido del rol extraído en secciones para revisar más rápido.

We invented the cyber ratings industry in 2011
Over 3000 customers trust Bitsight
Over 750 teammates are dispersed throughout Boston, Raleigh, New York, Lisbon, Singapore, and remote

Develop and enhance security strategies to protect against emerging threats.
Deploy and manage SIEM, EDR, and cloud security technologies to monitor and respond to incidents effectively.
Lead or participate in security incident handling and response, including SOC operations and DFIR.
Enforce least privilege access principles and secure network architectures.
Support AI governance initiatives, including evaluating AI security risks, contributing to AI usage policies, and implementing controls for AI tools and integrations used across the organization.
Work autonomously while also thriving in a collaborative team environment.
Utilize defense-in-depth methodology to enhance and sustain a secure environment.

4+ years of experience in dedicated information security roles.
Hands-on experience with SIEM and EDR solutions.
Expertise in security incident response and SOC operations.
Strong knowledge of least access principles and defense-in-depth methodologies.
Solid understanding of TCP/IP networking and security protocols.
Understanding of AWS cloud environments and working with related security technologies.
Excellent verbal and written communication skills, with the ability to engage technical, non-technical, and executive audiences.

Experience with vulnerability management, assessment, and remediation.
Familiarity with adversarial TTPs and attack frameworks (MITRE ATT&CK, etc.).
Knowledge of AI/LLM security risks, including prompt injection, model misuse, data exposure, and agentic AI threats.
Experience evaluating or implementing AI governance and security controls (e.g., MCP gateways, AI access policies, behavioral monitoring for AI tools).
Knowledge of security compliance frameworks (e.g., SOC 2, CIS, NIST 800 series, ISO 27001).
Experience with detection engineering tools (e.g., Suricata, YARA, Sigma).
Proficiency in Python for security automation, including threat detection and compliance workflows.