Senior System Engineer – Security (Level 3)Multiple Contract Resources (High-Priority Initiative)6+ Months (Long-term roadmap)Greater Philadelphia OR Charlotte, NC (Candidates must currently live in a commutable distance to either location)Hybrid - 3 Days Onsite per week (Tuesday – Thursday)Immediate (2-week turnaround from offer)We are searching for Engineers, not just coders or analysts. The ideal profile combines deep infrastructure, platform, and cloud engineering expertise with hands-on security hardening capabilities. This individual will own vulnerability remediation end-to-end, writing automation scripts and infrastructure-as-code to secure critical enterprise platform layers rather than simply passing tickets to other teams.Experience Level - 5 to 8+ years of deep track record in Systems Engineering, Security Engineering, or DevSecOps.Cloud Infrastructure - Production-level experience architectural hardening within AWS or Azure environments.Vulnerability Tooling - Direct, hands-on experience utilizing Snyk or closely related vulnerability scanning/management platforms.Automation & IaC - Scripting proficiency (Python, Bash) to automate remediation workflows.
Strong preference for Terraform and CI/CD integration.Systems & Containers - Deep understanding of OS hardening (Linux/Windows), networking fundamentals, and securing Kubernetes/Containers (Nice-to-Have).Drive the assessment, prioritization, and remediation of security findings across large-scale cloud and platform environments.Analyze complex security telemetry generated by scanning tools (Snyk) and execute infrastructure hardening strategies against external threat vectors.Automate manual security operational tasks, remediation workflows, and compliance guardrails utilizing scripting and Infrastructure as Code (IaC).Partner cross-functionally with Infrastructure, Platform Engineering, and Central Security teams to embed automated security controls directly into the engineering pipeline.Build out technical documentation, system standards, and repeatable procedures relative to platform security and vulnerability management.