Build and improve security across systems, infrastructure, cloud, applications, endpoints, and data. Credo is seeking a hands-on Security Engineer to investigate alerts and incidents, manage security technologies, reduce cybersecurity risk with cross-team partners, and help strengthen controls over time. This onsite role is based in San Jose, CA, with a base salary range of $90,000 to $110,000 per year and additional compensation including a discretionary bonus and equity, plus a full range of medical and other benefits.
What you’ll do
- Monitor, investigate, and respond to security alerts and incidents across endpoint, identity, email, network, cloud, and application environments, leading or supporting containment, remediation, and recovery.
- Administer and tune enterprise security platforms including SIEM, EDR/XDR, firewall/SASE, email security, and DLP, focusing on detection rules, integrations, health checks, and automation.
- Conduct vulnerability and exposure assessments, prioritize remediation based on risk, coordinate fixes with IT and application owners, and validate completion.
- Support security monitoring and secure configuration across AWS, Azure, and Google Cloud, and perform technical security reviews for vendors, SaaS applications, and new technologies.
- Document findings, runbooks, and evidence; support risk assessments and audits aligned with ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK; contribute to security projects and continuous improvement.
What you bring
- Bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field (or equivalent practical experience), plus at least 3 years in security engineering, security operations, incident response, or vulnerability management.
- Hands-on experience investigating security alerts and incidents and analyzing logs from multiple technologies and data sources.
- Experience administering or supporting enterprise security tools, including working knowledge of vulnerability assessment, prioritization, remediation, and validation.
- Strong understanding of endpoint, network, identity, email, cloud, application, and data-security principles, including Windows and Linux/Unix, TCP/IP, DNS, VPNs, firewalls, and least privilege.
- Scripting or automation skills in Python, PowerShell, or Bash, strong documentation and problem-solving abilities, and the ability to communicate risks to technical and non-technical stakeholders.
Tools and technologies
Python, PowerShell, Bash, SIEM, EDR/XDR, firewall/SASE, email security, DLP, ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK, Windows, Linux/Unix, TCP/IP, DNS, VPNs, Rapid7, Tenable, CrowdStrike, Microsoft De-fender, Palo Alto Networks Prisma/Strata, Proofpoint, Microsoft 365 security, AWS, Azure, GCP, PAM, PKI, Jira.
Certifications (examples)
- Security+, CySA+, GCIH, GCIA
- AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer
- CISSP/Associate of ISC2
Preferred qualifications
- Experience with platforms such as Rapid7, Tenable, CrowdStrike or Microsoft De-fender, Palo Alto Networks Prisma/Strata, and Proofpoint.
- Familiarity with Microsoft 365 security, cloud-security tooling across AWS, Azure, or GCP, and DLP or data-security platforms.
- Exposure to PAM and password vaults, PKI, application control, micro-segmentation, and virtualization technologies.
- Experience with security orchestration, workflow automation, and ticketing or re-remediation tracking (for example, Jira).
Location: San Jose, CA (onsite)
Salary: $90,000 - $110,000 per year
