Security Engineer

Build and improve security across systems, infrastructure, cloud, applications, endpoints, and data. Credo is seeking a hands-on Security Engineer to investigate alerts and incidents, manage security technologies, reduce cybersecurity risk with cross-team partners, and help strengthen controls over time. This onsite role is based in San Jose, CA, with a base salary range of $90,000 to $110,000 per year and additional compensation including a discretionary bonus and equity, plus a full range of medical and other benefits.

What you’ll do

• Monitor, investigate, and respond to security alerts and incidents across endpoint, identity, email, network, cloud, and application environments, leading or supporting containment, remediation, and recovery.
• Administer and tune enterprise security platforms including SIEM, EDR/XDR, firewall/SASE, email security, and DLP, focusing on detection rules, integrations, health checks, and automation.
• Conduct vulnerability and exposure assessments, prioritize remediation based on risk, coordinate fixes with IT and application owners, and validate completion.
• Support security monitoring and secure configuration across AWS, Azure, and Google Cloud, and perform technical security reviews for vendors, SaaS applications, and new technologies.
• Document findings, runbooks, and evidence; support risk assessments and audits aligned with ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK; contribute to security projects and continuous improvement.

What you bring

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field (or equivalent practical experience), plus at least 3 years in security engineering, security operations, incident response, or vulnerability management.
• Hands-on experience investigating security alerts and incidents and analyzing logs from multiple technologies and data sources.
• Experience administering or supporting enterprise security tools, including working knowledge of vulnerability assessment, prioritization, remediation, and validation.
• Strong understanding of endpoint, network, identity, email, cloud, application, and data-security principles, including Windows and Linux/Unix, TCP/IP, DNS, VPNs, firewalls, and least privilege.
• Scripting or automation skills in Python, PowerShell, or Bash, strong documentation and problem-solving abilities, and the ability to communicate risks to technical and non-technical stakeholders.

Tools and technologies

Python, PowerShell, Bash, SIEM, EDR/XDR, firewall/SASE, email security, DLP, ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK, Windows, Linux/Unix, TCP/IP, DNS, VPNs, Rapid7, Tenable, CrowdStrike, Microsoft De-fender, Palo Alto Networks Prisma/Strata, Proofpoint, Microsoft 365 security, AWS, Azure, GCP, PAM, PKI, Jira.

Certifications (examples)

• Security+, CySA+, GCIH, GCIA
• AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer
• CISSP/Associate of ISC2

Preferred qualifications

• Experience with platforms such as Rapid7, Tenable, CrowdStrike or Microsoft De-fender, Palo Alto Networks Prisma/Strata, and Proofpoint.
• Familiarity with Microsoft 365 security, cloud-security tooling across AWS, Azure, or GCP, and DLP or data-security platforms.
• Exposure to PAM and password vaults, PKI, application control, micro-segmentation, and virtualization technologies.
• Experience with security orchestration, workflow automation, and ticketing or re-remediation tracking (for example, Jira).

Location: San Jose, CA (onsite)
Salary: $90,000 - $110,000 per year