Senior Security Engineer
HybridSan Jose, California, United States
Job Summary
Protect and monitor infrastructure hosted in AWS and GCP; configure and maintain AWS WAF/CDN and GCP Cloud Armor rules. Secure containerized workloads across EKS and GKE clusters; implement Istio mesh policies and manage GitOps delivery security through ArgoCD. Integrate security into CI/CD pipelines using GitHub Actions; manage dependency and supply-chain risk via Dependabot. Administer and secure Azure Entra ID and SSO configurations; enforce least-privilege access across cloud, Kubernetes, and SaaS platforms. Manage Microsoft Defender XDR for endpoint and identity security; monitor alerts, investigate incidents, and lead incident response efforts. Secure the Microsoft 365 environment; implement Data Loss Prevention (DLP) policies and email security controls. Define and enforce secure baselines for Linux and Windows VMs, including patching, configuration management, and vulnerability remediation. Evaluate and govern the secure use of AI tools (Claude, OpenAI) and automation platforms (n8n) across the organization.
Required Qualifications
- 5+ years of experience in SecDevOps, Cybersecurity, or related roles
- Hands-on, production-level experience with AWS and GCP security configurations
- Practical AI experience with tools such as Claude, OpenAI, or similar in production or automation workflows
- Demonstrated experience managing Kubernetes and containerized workloads
- Demonstrated experience in at least 3 of the following: Identity and Access Management (Azure Entra ID, SSO); service mesh technologies (Istio or similar); GitOps tooling (ArgoCD or similar); Endpoint Detection and Response (EDR) / XDR solutions; OAuth, OIDC, SSO; IaC (Terraform preferred) and Git/GitHub workflows
- Solid understanding of networking fundamentals (TCP/IP, DNS, firewalls, VPNs)
- Scripting and automation skills (Python, PowerShell, or Bash)
- Strong analytical, problem-solving, and communication skills
- Location: Costa Rica (Hybrid) - Must live near San Jose, Costa Rica
Desired Qualifications
- Security certifications such as CISSP, CISM, AWS Security Specialty, GCP Security Engineer, CKS, SC-200, OSCP, or CEH
- Background in compliance frameworks (SOC 2, ISO 27001, PCI-DSS, GDPR)
- Experience with workflow-automation platforms such as n8n
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.