Senior Security Engineer

The role

You will own security across cloud infrastructure, AI platforms, and the corporate environment. This includes building detection and response, driving cloud and container posture, and securing the software supply chain.

What you will do

• Own security across cloud infrastructure, AI platforms, and corporate environment
• Build detection and response for the corporate environment
• Drive cloud and container posture to a defensible state
• Secure the software supply chain
• Set controls to show customers and partners how data is protected
• Hardening container workloads
• Tightening cloud identity and access
• Running down suspicious endpoint alerts

Required qualifications

• 6+ years of hands-on security engineering experience
• At least 3 years securing production cloud environments
• Deep experience securing workloads on major public cloud platforms, including identity and access management, network segmentation, encryption and key management, logging, and organization-level guard
• Production experience securing container orchestration platforms and containerized workloads, including image hardening, admission control, and runtime protection
• Hands-on experience with cloud security posture management, vulnerability prioritization, and cloud workload protection
• Hands-on experience with enterprise EDR and XDR platforms, from policy tuning through detection triage and response
• Experience building detections and running investigations across cloud, identity, and endpoint telemetry
• Strong understanding of identity security, including SSO, MFA, conditional access, and least privilege access for engineers and service accounts
• Experience securing CI/CD and the software supply chain, including static analysis, secret scanning, infrastructure-as-code scanning, dependency risk, and artifact integrity
• Infrastructure-as-code experience
• Proficiency in Python or Go for automation, tooling, and detection engineering
• Experience with secrets management at scale

Nice to have

• Experience in incident response, DFIR, or a managed detection and response environment
• Experience securing LLM and agentic AI systems, including prompt injection defenses, action authorization, and isolation of untrusted execution
• Experience with Zero Trust access architectures
• Experience with multi-tenant SaaS isolation and third-party integrations
• Working knowledge of SOC 2, ISO 27001, or similar frameworks
• Offensive security, red team, or cloud penetration testing experience
• Relevant certifications such as OSCP, GCIH, GCFA, or cloud security specialty certifications

About the company

MOXFIVE is building technologies that leverage AI to streamline the response, recovery, and resilience from cyber-attacks in enterprises. The founding team brings over 30 years of combined cybersecurity experience from leading companies.