EngineerJobs.io
← Back to all jobs

Job Description

Latitude AI is hiring a Senior Cyber Security Engineer to lead hands-on security engineering for identity, device management, and networking security across HPC and virtualization environments.

Responsibilities

  • Design, implement, and deploy Identity and Device Management using Entra/Okta and MDM platforms such as Intune
  • Engineer Network Security with best practices across software, network, and infrastructure engineering
  • Advocate security controls for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in network management tooling (Palo Alto, Fortinet, F5)
  • Deliver security projects on schedule and with strong quality, including secure configuration standards
  • Review existing and new deployments and architecture designs to identify design flaws and recommend stronger security controls aligned to functional and operational needs
  • Collaborate with Cloud Platform, IT, and Product teams to research, design, and build security solutions and deployment strategies for business requirements
  • Participate in Data Center and Network Security initiatives, assessing security access controls and implementing supplemental technical solutions
  • Document findings, run comparisons, perform threat and risk assessments, and execute Proof of Concepts to support design decisions
  • Develop, review, and design automation and orchestration for security aspects including device controls and access to services
  • Provide security posture inputs via dashboards and reporting metrics
  • Plan, execute, and follow through on projects and engagements independently
  • Perform hands-on solution deployment, working independently and with the team
  • Mentor team members and support engineering staff with knowledge transfer
  • Proactively monitor, analyze, and remediate system security issues
  • Write scripts to automate security checks and create tools that improve support for cloud, virtualized systems, and development environments
  • Develop security playbooks/runbooks for operations and troubleshooting documentation
  • Evaluate and contribute to network and infrastructure solution designs with security and functionality as implementation pillars
  • Moderate and contribute to Supercomputing System Administration initiatives supporting the team

Requirements

  • Bachelor’s degree in Computer Engineering, Computer Science, Cyber Security, or related field and 4+ years relevant experience (or Master’s with 2+ years relevant experience)
  • Strong preference for 8+ years related experience, or 6 years with a Master’s degree, including experience as an Identity and Device Management Engineer and/or Network Security Architect/Engineer deploying to production from scratch
  • 2+ years of vulnerability management experience including risk rating/severity adjustment for cloud and other infrastructure
  • Experience with Lustre, Kerberos, and Linux Administration
  • Proficiency in Bash, Python, Go, or Java to build production-grade automation and services integrated into CI/CD
  • Hands-on experience with Infrastructure as Code (IaC) to automate cloud resources and virtualized systems, with familiarity including Terraform, Cloud Formation, Ansible, or others
  • Ability to learn new technologies quickly and prioritize multiple responsibilities
  • Hands-on experience patching and hardening Linux, MacOS, and Windows systems (clients and servers), including images and containers
  • Proficiency with network protocols and firewall management, including configuration and optimization for internal and perimeter security
  • Critical thinking and holistic security perspective balancing security needs with mission requirements and cross-team collaboration
  • Exceptional organizational and time management skills with proven autonomy and professional collaboration
  • Strong experience architecting and deploying scalable security services and workloads in cloud-native and virtualized environments
  • Ability to deploy device management solutions to control access to company solutions
  • Understanding of engineering design constraints to guide teams in securing deployments for performance, budget, and timing
  • Independent, take-charge approach with calculated risk taking and informed decision making
  • Strong understanding of ISO27001 and NIST 800-53
  • Experience with Jenkins is a plus
  • Experience with Zero Trust Architecture (ZTA) principles and implementations
  • Exposure to data governance, secure data movement, and storage lifecycle management
  • Demonstrated strength in verbal, written, and presentation communication, including technical diagramming
  • Sense of comradery, compassion, and strong passion/energy

Technologies

  • Entra, Okta, Intune
  • Palo Alto, Fortinet, F5
  • DMZ architectures, NAC/NAP, lateral isolation
  • Lustre, Kerberos, Linux
  • Bash, Python, Go, Java
  • CI/CD
  • Infrastructure as Code (IaC): Terraform, Cloud Formation, Ansible
  • MacOS, Windows
  • NIST 800-53, ISO27001
  • Zero Trust Architecture (ZTA)
  • Jenkins

Benefits

  • Competitive compensation packages
  • High-quality medical, dental, and vision insurance for individuals and families
  • Health savings account with employer match
  • Employer-matched 401(k) retirement plan with immediate vesting
  • Employer-paid group term life insurance and optional voluntary life insurance
  • Paid parental leave and Adoption/Surrogacy support program
  • Paid medical leave
  • Unlimited vacation and 15 paid holidays
  • Daily lunches, snacks, and beverages at office locations
  • Pre-tax spending accounts for healthcare and dependent care
  • Pre-tax commuter benefits
  • Monthly wellness stipend
  • Backup child and elder care program
  • Professional development reimbursement
  • Employee assistance program
  • Discounted programs including legal services, identity theft protection, and pet insurance
  • Employee resource groups, quarterly team activity stipend, and wellness initiatives

Team

  • The Enterprise Cyber Security team focuses on resilience of the corporate environment, protecting corporate systems, IP, and employee data

Location: Palo Alto, CA (onsite)

Compensation: USD 160,000 - 240,000 per year

Similar Jobs