Senior Security Engineer

About the role

This Senior Security Engineer position at Nearfoundation involves leading security initiatives with a focus on IT and security workflows. The role requires taking ownership of security programs from start to finish, demonstrating a clear mandate and executive support within a rapidly evolving environment. Success in this position means effectively implementing and managing security measures across the organization.

The work will encompass maintaining security compliance, specifically with SOC II Type 2 and ISO 27001 readiness and audit cycles. This includes hands-on experience with Identity and Access Management (IAM), endpoint security, and cloud platforms such as AWS or GCP. The role is designed for an individual contributor who can drive projects independently.

A key aspect of this role is the automation of IT and security processes through scripting. The ideal candidate will also manage SSO/IdP platforms, MDM/EDR tools, and modern logging/SIEM stacks. This position offers a path to broader security leadership as the program develops, indicating a growth opportunity within the organization.

The salary for this Senior Security Engineer role is between $120,000 and $150,000 USD.

Skills that matter here

• information security: This role requires over seven years of experience in information security, with a focus on IT engineering depth.
• SOC II Type 2: The engineer will be responsible for leading SOC II Type 2 readiness and audit cycles.
• IAM: The position involves hands-on experience with Identity and Access Management systems.
• AWS: Experience with cloud platforms like AWS or GCP is necessary for managing cloud security.
• Python: Scripting in Python, Go, or Bash is required for automating IT and security workflows.
• Okta: Practical experience with SSO/IdP platforms such as Okta, Google Workspace, or Entra is expected.

Who this role suits

• A person who has spent at least seven years in information security, with significant time as a senior individual contributor.
• Someone who is pragmatic about risk and process, maintaining composure under pressure.
• An individual who values clear communication, capable of writing policies, incident reviews, and audit narratives.
• A candidate with a bias for action, who takes initiative to implement and automate security solutions.

From the employer

Requirements

• 7+ years in information security with strong IT engineering depth, including meaningful time as a senior IC owning programs end-to-end.
• Demonstrated ownership of SOC II Type 2 and ideally ISO 27001 readiness and audit cycles in a fast-moving environment.
• Deep hands-on experience across IAM, endpoint, and at least one cloud (AWS or GCP).
• Comfortable scripting (Python, Go, or Bash) and automating IT and security workflows.
• Practical experience with SSO/IdP platforms (Okta, Google Workspace, Entra), MDM/EDR tooling, and modern logging/SIEM stacks.
• Strong written communication — clear policy, clean post-incident reviews, credible audit narratives.
• Pragmatic about risk and process; calm under pressure; bias to action.
• Crypto or AI/ML exposure is a plus.

Why This Role

• Clear mandate, executive sponsorship, and real scope across IT and security in a fast-moving ecosystem.
• Senior IC role with strong path to broader security leadership as the program matures.