Bitsight

Security Engineer- Corporate Security

Vaga remota de Security Engineering com fit claro de localização do candidato.

Publicada23 de jul. de 2026

Países elegíveis1 país aceito

Sinal de senioridadeMiddle

Modelo de trabalhoRemoto

Locais aceitos para candidatos

Estados Unidos

Resumo da vaga

Conteúdo da vaga extraído em seções para revisão mais rápida.

We invented the cyber ratings industry in 2011
Over 3000 customers trust Bitsight
Over 750 teammates are dispersed throughout Boston, Raleigh, New York, Lisbon, Singapore, and remote

Develop and enhance security strategies to protect against emerging threats.
Deploy and manage SIEM, EDR, and cloud security technologies to monitor and respond to incidents effectively.
Lead or participate in security incident handling and response, including SOC operations and DFIR.
Enforce least privilege access principles and secure network architectures.
Support AI governance initiatives, including evaluating AI security risks, contributing to AI usage policies, and implementing controls for AI tools and integrations used across the organization.
Work autonomously while also thriving in a collaborative team environment.
Utilize defense-in-depth methodology to enhance and sustain a secure environment.

4+ years of experience in dedicated information security roles.
Hands-on experience with SIEM and EDR solutions.
Expertise in security incident response and SOC operations.
Strong knowledge of least access principles and defense-in-depth methodologies.
Solid understanding of TCP/IP networking and security protocols.
Understanding of AWS cloud environments and working with related security technologies.
Excellent verbal and written communication skills, with the ability to engage technical, non-technical, and executive audiences.

Experience with vulnerability management, assessment, and remediation.
Familiarity with adversarial TTPs and attack frameworks (MITRE ATT&CK, etc.).
Knowledge of AI/LLM security risks, including prompt injection, model misuse, data exposure, and agentic AI threats.
Experience evaluating or implementing AI governance and security controls (e.g., MCP gateways, AI access policies, behavioral monitoring for AI tools).
Knowledge of security compliance frameworks (e.g., SOC 2, CIS, NIST 800 series, ISO 27001).
Experience with detection engineering tools (e.g., Suricata, YARA, Sigma).
Proficiency in Python for security automation, including threat detection and compliance workflows.