Senior Security Engineer

The Senior Security Engineer will support enterprise security by assessing security architecture and executing hands-on security testing across on-premises infrastructure and Azure cloud environments. The role also includes advising stakeholders on findings, strengthening network security controls, and contributing to incident response activities.

Role Overview

This position emphasizes evaluating network security posture across design, implementation, and deployment, with a focus on aligning architecture and controls to enterprise standards. The engineer will review Azure-specific components, integrate security into CI/CD workflows, and produce security assessment reports for technical and non-technical audiences.

Key Responsibilities

• Perform comprehensive security assessments and penetration tests on on-premises networks and Azure cloud environments, using manual and automated testing for network controls, firewalls, and cloud-native security features.
• Assess network security posture across design, implementation, and deployment to ensure alignment with enterprise security standards.
• Collaborate with application security architects to incorporate secure design principles into network infrastructure.
• Partner with cross-functional teams (IT, DevOps, Application Development, Enterprise Architecture) to identify vulnerabilities and support remediation.
• Integrate security controls and automated testing into CI/CD pipelines for network and cloud deployments.
• Review and improve network architecture by identifying threats, risks, and Azure service-specific compliance gaps (including Azure Firewall, Network Security Groups, and Azure Gateway).
• Provide guidance on identity and access management (IAM), data protection, and secure connectivity between on-premises and cloud environments.
• Develop and enforce network security policies, standards, and best practices aligned with frameworks such as NIST, CIS Benchmarks, and OWASP.
• Stay current with emerging network security trends, Azure security enhancements, and evolving threat landscapes.
• Prepare security assessment reports and communicate findings to technical and non-technical stakeholders.
• Participate in incident response related to network or application security events.

Required Qualifications

• 5+ years of professional experience in network security with hands-on exposure to both on-premises and Azure cloud environments.
• Strong understanding of application security architecture and how it integrates with network security.
• Experience conducting manual and automated network security assessments, including scanning and penetration testing.
• Knowledge of secure software development lifecycle (SSDLC) and DevSecOps practices, including integration of security into development workflows.
• Familiarity with Azure security tools and services, including Azure Firewall, Network Security Groups, Security Center/Defender, and Key Vault.
• Strong communication skills to advise and collaborate across enterprise teams.
• Relevant certifications are a plus, such as Azure Security Engineer Associate, CISSP, CEH, or CCSP.
• Bachelor’s degree in Computer Science, Information Security, or a related field is preferred.

Technologies

• Azure
• Azure Firewall
• Network Security Groups
• Azure Gateway
• Security Center/Defender
• Key Vault
• CI/CD
• NIST
• CIS Benchmarks
• OWASP
• SSDLC
• DevSecOps

Compensation

USD 60 per hour

Benefits

• Dental insurance
• Health insurance
• Vision insurance

Location and Work Mode

• Los Angeles, CA | Onsite
• Work location: In person
• Job location: Los Angeles, CA | Onsite

Application Questions

• How much hands-on experience do you have with Microsoft Azure security? Which Azure security services have you personally configured or managed?
• Have you personally performed security assessments, vulnerability assessments, or penetration testing? Please describe one recent example and the tools you used.
• What experience do you have with network security technologies such as firewalls, NSGs, VPNs, IDS/IPS, WAF, or network segmentation?
• Located in the West Los Angeles, CA area