[Remote] Senior Security Engineer

Note: The job is a remote job and is open to candidates in USA. MOXFIVE is building AI-enabled technologies for enterprise cyber-attack response, recovery, and resilience. The Senior Security Engineer will own security across the company’s cloud infrastructure, AI platforms, and corporate environment, protecting customer data while building detection, response, and security controls.

Responsibilities

• You will help design and defend the boundaries that keep their data protected
• You will own security across our cloud infrastructure, AI platforms, and corporate environment, including endpoints, identity, email, and business applications
• That means building detection and response for our own environment, driving cloud and container posture to a defensible state, securing the software supply chain, and setting the controls that let us show customers and partners exactly how their data is protected

Skills

• 6+ years of hands-on security engineering experience, with at least 3 years securing production cloud environments
• Deep experience securing workloads on major public cloud platforms, including identity and access management, network segmentation, encryption and key management, logging, and organization-level guardrails
• Production experience securing container orchestration platforms and containerized workloads, including image hardening, admission control, and runtime protection
• Hands-on experience with cloud security posture management, vulnerability prioritization, and cloud workload protection
• Hands-on experience with enterprise EDR and XDR platforms, from policy tuning through detection triage and response
• Experience building detections and running investigations across cloud, identity, and endpoint telemetry
• Strong understanding of identity security, including SSO, MFA, conditional access, and least privilege access for engineers and service accounts
• Experience securing CI/CD and the software supply chain, including static analysis, secret scanning, infrastructure-as-code scanning, dependency risk, and artifact integrity
• Infrastructure-as-code experience, and the ability to fix what you find rather than file tickets for it
• Proficiency in Python or Go for automation, tooling, and detection engineering
• Experience with secrets management at scale
• Experience securing corporate IT, including device management, endpoint hardening, and email and SaaS application security
• Sound judgment handling sensitive, privileged, and regulated data
• Experience in incident response, DFIR, or a managed detection and response environment
• Experience securing LLM and agentic AI systems, including prompt injection defenses, action authorization, and isolation of untrusted execution
• Experience with Zero Trust access architectures
• Experience with multi-tenant SaaS isolation and third-party integrations
• Working knowledge of SOC 2, ISO 27001, or similar frameworks, with a bias toward controls that are automated and evidenced continuously
• Offensive security, red team, or cloud penetration testing experience
• Relevant certifications such as OSCP, GCIH, GCFA, or cloud security specialty certifications

Company Overview