Senior Security Engineer

RESPONSIBILITIES:
Kforce has a client in Oakland, CA that is seeking a seasoned Senior Information Security Engineer to lead critical cybersecurity initiatives and strengthen our client's enterprise-wide security posture. This role will focus on architecting and implementing advanced controls to protect our systems, data, and infrastructure across on-premises and cloud environments. The ideal candidate will drive key initiatives such as Data Loss Prevention (DLP), Zero Trust architecture, Cloud Security, Network Segmentation, Identity and Access Management (IAM), and Security Automation, ensuring a proactive defense against evolving threats.

Key Responsibilities:
* Lead the design, implementation, and management of enterprise security solutions, ensuring alignment with organizational objectives and compliance requirements
* Drive strategic security programs including Data Loss Prevention, Zero Trust enablement, Network Segmentation, Cloud Security, IAM, and Endpoint Security modernization
* Manage and enhance email protection platforms and email gateway security solutions to safeguard against phishing, malware, and data exfiltration
* Implement and maintain DNS security controls to prevent domain hijacking, phishing, and command-and-control communication
* Conduct advanced threat detection, analysis, and incident response, providing rapid containment and post-incident remediation
* Lead vulnerability management and remediation programs, providing visibility to executives and stakeholders on key risks and progress
* Lead the development, testing, and continuous improvement of incident response and disaster recovery plans, ensuring rapid containment, minimal business disruption, and effective post-incident analysis to strengthen organizational resilience
* Develop and enforce enterprise security policies, standards, and procedures aligned with NIST, CIS, ISO 27001, and SOX frameworks

REQUIREMENTS:
* Bachelor's degree in Computer Science, Cybersecurity, or a related field (Master's preferred)
* 7+ years of progressive experience in information security engineering, architecture, or operations
* Proven expertise in data protection, cloud security, email and DNS security, and identity management
* Hands-on experience managing Microsoft 365 security tools (Defender, Exchange Online Protection, Purview DLP) and email gateway platforms (e.g., Avanan, Proofpoint, Mimecast, Cisco Secure Email)
* Experience implementing DNS filtering and protection solutions (e.g., Valimail, Cisco Umbrella, Infoblox, Cloudflare Gateway)
* Demonstrated success leading user awareness and training programs and advancing overall security program maturity
* Strong understanding of Zero Trust principles, vulnerability management, endpoint protection, and security automation
* Knowledge of security frameworks such as NIST CSF, CIS Controls, ISO 27001, and SOX
* Familiarity with multi-cloud environments (AWS, Azure, Google Cloud Platform) and DevSecOps practices
* Scripting or automation experience (Python, PowerShell, Bash) preferred
* Exceptional communication and leadership skills with the ability to influence at all organizational levels

Relevant certifications such as:
* CISSP, CISM, or GIAC (for senior-level leadership and strategy)
* Microsoft Certified: Cybersecurity Architect Expert or Microsoft Security Operations Analyst Associate
* AWS Certified Security - Specialty (demonstrating expertise in securing AWS environments)
* CompTIA Security+, CySA+, or CASP+ (for hands-on security implementation)
* Microsoft Certified: Azure Security Engineer Associate (demonstrating expertise in securing Azure environments)

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.