Security Engineer
Censys · Remote
About this role
**Security Engineer** **About Censys** Censys maps the internet and delivers real-time Internet intelligence to global governments, 50%+ of Fortune 500, and leading threat intelligence providers worldwide. **The Role** Senior, high-ownership position on a small team. You'll own identity programs, cloud security posture, and vulnerability management end-to-end, serve as a core incident responder, and build automation (including agentic workflows) to operate at scale. **Key Responsibilities** • **Identity & Access Management** – Own identity as a program; drive down standing access and manual provisioning • **Cloud Security (GCP-first)** – Harden cloud-native environment: org policy, IAM, service accounts, network segmentation, secrets management, posture monitoring • **Vulnerability Management** – Asset coverage, risk-based prioritization, defensible SLAs, partnership with engineering on remediation • **Detection & Incident Response** – Build detection coverage, lead high-severity incidents, run blameless post-incident reviews • **AI & Agentic Security** – Secure AI footprint and build agentic security workflows (alert triage, access review orchestration, phishing response) • **Security Automation** – ChatOps-driven requests, self-service paths, Slack-native operations **Required Experience** • 5+ years security engineering with depth in 2+ of: IAM, cloud security, vulnerability management, detection/response • Hands-on identity ops (SSO/SAML/OIDC, MFA, device trust); Duo and Google Workspace experience preferred • Cloud-first/native environment security; GCP preferred • Scripting/automation (Python, Go, etc.) for tooling and API integrations • Incident response as primary responder or lead • Hands-on LLM or agent framework experience • Familiarity with control frameworks (ISO 27XXX, CMMC, FedRAMP) • Comfort with ambiguity on lean teams; strong async/Slack communication **Bonus** Deep GCP expertise, agentic systems experience, detection engineering, security product company background, CMMC/FedRAMP experience, SOC 2/ISO 27001/42001/GDPR knowledge, security metrics reporting, open source contributions, relevant certifications (GCP Professional Cloud Security Engineer, GIAC, OSCP)
Listing freshness
CronJobs last confirmed this listing 3h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.