Security Engineer

Role: Security Engineer

You will join Soteria’s growing advisory team to help clients assess and improve their security posture. The role emphasizes hands-on technical assessments, remediation support, and trusted-advisor communication with client leadership.

Responsibilities

• Communicate with prospective and existing clients to understand security needs and develop engagement plans.
• Perform cloud and infrastructure security assessments, including:
  • Microsoft 365, Microsoft Azure, Google Workspace
  • AWS, Active Directory, and identity providers
• Translate security documentation into operational practices.
• Conduct hands-on remediation based on security assessment findings.
• Produce detailed assessment reports with actionable recommendations aligned to client needs and service level objectives.
• Apply security framework controls aligned to NIST, CIS, ISO, and/or MITRE ATT&CK.
• Design, evaluate, and implement secure network architectures.
• Assess emerging technologies to recommend cost-effective, lower-risk architectural options.
• Work with clients and the Soteria team to develop plans of action and ensure desired outcomes.
• Document and present findings to clients, including C-suite and board-level executives.
• Maintain client relationships post-assessment and continue advising as security programs mature.
• Improve internal tooling where appropriate.
• Support business development and revenue goals (referrals/repeat clients, proposals, contract execution).
• Manage projects and ensure proactive, professional client communication.
• Train and mentor other employees.

Requirements

• 5+ years of industry experience (technology experience requirement).
• Comfort with rapid evolution of security technologies and continuous self-study.
• Familiarity with scripting languages such as PowerShell, Python, or Go (Golang).

Nice to Have / Commonly Mentioned Capabilities

• Experience with Microsoft enterprise tools, server/network components, and identity providers.
• Experience aligning work to recognized security frameworks (NIST/CIS/ISO/MITRE ATT&CK).