- United States
- 5–7 years
Lead the security engineering capability for Sand Technologies, focusing on cloud security across AWS, Azure, and GCP, and managing incident response, vulnerability pipelines, and compliance readiness.
Responsibilities
- Serve as second responder on security incidents across Sand
- Operate and tune our security stack: Microsoft Defender for Cloud/Endpoint, Intune, Sentinel, and vulnerability scanning across a multi-account AWS organization, GCP, and Azure
- Build and maintain the vulnerability data pipeline: raw exports from cloud-native tools, deduplication by unique CVE, finding-age and SLA computation, and the feeds behind our security metrics
- Run tooling validations — side-by-side parity testing when we transition platforms, with evidence that stands up to audit
- Partner with infrastructure/DevOps teams on remediation: container base-image hygiene, registry lifecycle policies, exposure management, and verifying closure on the next scan
Requirements
- Nice to have: Qualys
- Nice to have: Microsoft Defender
- Nice to have: Microsoft Sentinel
- Nice to have: Terraform
- Nice to have: container security