Security Engineer – Infrastructure & Automation

I speak to a lot of security engineers, and I’m very interested in those who thrive in smaller teams, working across large, complex technology environments where the technical bar is exceptionally high.

I’m currently representing an organisation in New York that’s looking for a particular type of security engineer. Someone who enjoys solving puzzles, investigating problems and figuring things out when the answer isn’t immediately obvious.

This is an opportunity for someone who enjoys being a technical generalist. Someone who understands security, can write code, is comfortable working with infrastructure and enjoys taking ownership of problems that don’t always fit neatly into one area of engineering.

You’ll be great for this role if you can demonstrate evidence of investigating complex technical challenges, understanding the underlying systems and taking responsibility for delivering solutions.

This isn’t about managing security tools, reviewing dashboards or passing problems to other engineering teams. My client needs someone who can get under the bonnet of a problem and see it through. The buck really does stop with you.

The work is varied, and you’ll have the opportunity to get involved in projects spanning security engineering, incident response, infrastructure, software development and automation.

As a broad security technologist, you’ll be responsible for building internal tools, improving security controls, investigating vulnerabilities and incidents, strengthening access controls and helping secure sensitive systems and data. You’ll also have the opportunity to work on wider engineering projects and explore how AI can improve security and development workflows.

The engineers I’m most interested in speaking to are those who can demonstrate:

• Strong programming ability, ideally Python, Go or a similar language, with experience building tools and automating technical processes.
• A solid understanding of information security, including vulnerability management, endpoint protection, threat detection, incident response and access controls.
• Experience working across infrastructure and complex technical environments, rather than being limited to one security discipline.
• The ability to investigate unfamiliar problems, understand how systems work and develop practical solutions independently.
• Strong communication skills. You’ll need to explain technical problems clearly, challenge ideas when necessary and work effectively with people across different areas of the business.
• Genuine curiosity, good judgement and a track record of taking ownership of difficult technical challenges.

This isn’t a graduate or entry-level opportunity. I’m looking for engineers who have some skin in the game, have worked through complex technical problems and can demonstrate what they’ve personally built, improved or secured.

Equally, I’m not looking for someone who’s spent their entire career managing teams. The technical bar is high, and you’ll need to be comfortable getting involved in the detail.

Compensation is expected to be in the region of $300,000–$500,000 total, depending on experience.

The role is hybrid in New York City and open to candidates already based in the US.

If this sounds like the type of engineering environment you enjoy, I’d be interested in having a conversation.