Cyber Security Engineer

Position: Cyber Security Engineer Location: San Francisco, CA - (Onsite) Full Time Role

Duties and Responsibilities:
Collaborate with Engineering Business Units, Operations teams to architect, deploy, and continuously optimize enterprise security controls that balance robust protection with business agility.
Drive the continuous optimization of core security platforms, focusing on Vulnerability Management, Privileged Access Management (PAM), and automated workflows to enhance our defensive posture.
Ensure high availability and performance of owned security platforms by providing advanced technical support and streamlining escalation paths.
Create and maintain clear technical documentation for security configurations, processes, and improvements.
Actively monitor global threat intelligence feeds and vulnerability disclosures to identify emerging risks and integrate proactive countermeasures into our security architecture.
Orchestrate enterprise-wide phishing simulation programs to quantify organizational risk and leverage data-driven insights to strengthen the human firewall" against social engineering.
Translate complex vulnerability data into comprehensive risk reports, providing stakeholders with clear technical roadmaps to harden the organization's security posture.
Support internal and external security audits by providing technical evidence as needed.

Required Experience/Skills:
5+ years of experience in Cybersecurity Engineering, Infrastructure Security, or a related technical role, with a proven track record of managing enterprise-grade security platforms or or a Master s degree with 3 years; or a PhD without experience
Deep technical understanding of security controls across multiple domains, including Vulnerability Lifecycle Management, Privileged Access Management (PAM), Identity & Access Management (IAM), and Network Defense.
Knowledge of one or more Cloud platforms (AWS, Azure and Google Cloud Platform) and best practices for architecting and securing.
Familiarity with security telemetry concepts, including logging, monitoring, and alerting.
Awareness of common enterprise threat vectors and the types of controls used to prevent or detect them.
Knowledge of security trends, software, and protocols.
Problem-solving, attention to detail, sharp analytical skills.
Strong communication skills.

Nice to Have / Growth Areas:
Commitment to continuous professional growth, demonstrated by early progress toward or a desire to obtain industry-recognized certifications such as Security+, SSCP, or CISSP to deepen domain expertise.
Working knowledge of scripting languages with a drive to develop automated response capabilities, ensuring security controls are consistent, scalable, and repeatable.

Thanks & Regards
Mahesh