Security Engineer

Role: Security Engineer (Senior)

Join BlackCloak to strengthen corporate security, cloud security operations, and compliance. You will design, deploy, and support security solutions across applications and infrastructure, while helping mature a Secure SDLC and promoting a security-first culture.

Key Missions

• Conceive, deploy, and support security solutions for applications and cloud infrastructure.
• Collaborate with engineering teams to provide remediation guidance and improve vulnerability handling.
• Implement modern security tools and processes to improve the company’s security posture.
• Partner with Engineering and DevOps to secure GCP and AWS environments.
• Develop secure infrastructure baselines and improve Zero Trust posture.
• Contribute to application security strategy and Secure SDLC program implementation.

Requirements

• Experience with EDR tools such as SentinelOne, CrowdStrike, or similar.
• Demonstrated experience securing public cloud environments, with strong preference for GCP.
• Proficiency in at least one scripting language (e.g., Python, Bash) to automate security tasks.
• Strong understanding of Zero Trust and IAM, with practical implementation experience.
• Experience with tools such as Cloudflare for Zero Trust/IAM-related controls.
• Experience with SIEM platforms such as Google SecOps or Splunk.
• Experience with SAST/SCA tools such as Snyk, Checkmarx, or Veracode.
• Proactive, builder mindset; strong problem-solving and collaboration with technical and non-technical stakeholders (e.g., GTM).

Nice-to-haves

• CNAPP experience (e.g., Wiz, Prisma Cloud).
• Experience building or contributing to a Secure SDLC program, including security architecture reviews.
• Familiarity with Infrastructure as Code (IaC) and security implications (e.g., Terraform).
• Knowledge of compliance frameworks such as SOC 2, GDPR, NIST CSF.
• Familiarity with application development languages such as Java or JavaScript.
• Relevant certifications (e.g., GCLD, GCP Cloud Security Engineer, GCSA).

Experience Level

• 3–5 years of hands-on experience in a security engineering role, preferably in a cloud-native startup environment.