Senior Security Engineer

Senior Security Engineer

WHAT YOU’LL DO:

The Senior Security Engineer will work closely with IT Infrastructure, Cloud, Applications, Data, Service Desk, and Information Security & Compliance teams to implement security controls, investigate security events, remediate vulnerabilities, and improve AAA Washington's overall security posture.

WHO WE ARE: 

At AAA Washington, we equip our members with trusted service and expertise to confidently travel through life. We provide our members with best-in-class roadside assistance, discounts and rewards, travel services and insurance. For over 120 years, we’ve served our members, not shareholders, so our growth supports innovation for the Club today and for the future. Seeking to reflect the communities we serve and create an inclusive culture, we encourage employees to bring their full self to work and support applicants from all backgrounds, abilities and walks of life to apply.

WHY YOU’LL LOVE WORKING AT AAA WASHINGTON:

You’ll play an important role in bringing AAA Washington’s spirit of service and peace of mind to our membership. Consistently ranked as one of the Best Places to Work by Puget Sound Business Journal, we aim for work-life balance across the organization. We support hybrid and remote work options for many positions based in our corporate office (Bellevue, Washington) along with some of the best benefits in the region!

ESSENTIAL DUTIES/RESPONSIBILITIES:

• Security Engineering & Architecture 
• Design, implement, and maintain security controls across on-premises, cloud, endpoint, network, application, and identity environments. 
• Evaluate security architectures and provide recommendations to improve AAA Washington's security posture. 
• Partner with IT and engineering teams to incorporate security into infrastructure, application, and technology projects. 
• Develop and maintain secure configuration standards and technical security baselines. 
• Participate in security architecture and technology reviews for new systems, applications, vendors, and services. 
• Identify opportunities to automate security controls, monitoring, and response activities. 
• Security Monitoring & Incident Response 
• Monitor security alerts and investigate potential security events and incidents. 
• Participate in incident response activities, including investigation, containment, eradication, and recovery. 
• Analyze security logs and telemetry from SIEM, EDR, identity, network, cloud, and other security platforms. 
• Develop and improve detection rules, alerting, and security monitoring capabilities. 
• Conduct root-cause analysis following significant security events. 
• Participate in incident response exercises and continuously improve response procedures. 
• Escalate significant security events in accordance with AAA Washington's incident response procedures. 
• Collaboration & Communication 
• Serve as a technical security advisor to IT and business stakeholders. 
• Explain technical security risks and recommendations in language appropriate for technical and non-technical audiences. 
• Mentor and provide technical guidance to junior security engineers and analysts. 
• Promote a culture of security ownership throughout AAA Washington. 
• Participate in security awareness and education activities when appropriate. 
• Other duties as assigned

SUPERVISORY RESPONSIBILITIES:

• None

MINIMUM QUALIFICATIONS:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. 
• 5+ years of experience in information security, cybersecurity, security engineering, infrastructure security, or a related technical discipline. 
• Demonstrated experience implementing and operating enterprise security technologies. 
• Strong understanding of network, endpoint, identity, cloud, and infrastructure security principles. 
• Experience with security monitoring, incident investigation, and vulnerability management. 
• Experience working with security tools such as EDR, SIEM, vulnerability management, firewalls, WAF, DLP, IAM, or related technologies. 
• Experience developing security configurations, standards, procedures, and technical documentation. 
• Ability to troubleshoot complex technical security issues. 
• Strong analytical and problem-solving skills. 
• Ability to work independently while collaborating effectively across technical and business teams. 

PREFERRED QUALIFICATIONS:

• Experience with Microsoft security technologies and the Microsoft security ecosystem. 
• Experience with Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Intune, and Microsoft Purview. 
• Experience with cloud security, particularly Microsoft Azure. 
• Experience with vulnerability management platforms and security scanning. 
• Experience with identity and privileged access management. 
• Experience implementing security controls aligned with NIST CSF, ISO 27001, CIS Controls, or similar frameworks. 
• Experience supporting PCI DSS, SOX, SOC 2, or other compliance requirements. 
• Experience with scripting or automation using PowerShell, Python, or similar technologies. 

CERTIFICATES, LICENSES, REGISTRATIONS:

Security certifications in the following areas, or equivalent experience:

• CISSP
• Security+
• CySA+
• GIAC
• CCSP

KNOWLEDGE, SKILLS, ABILITIES:

• Technical Security 
• Security Engineering 
• Network Security 
• Endpoint Security 
• Cloud Security 
• Identity & Access Management 
• Vulnerability Management 
• Security Monitoring 
• Incident Response 
• Data Protection 

SALARY:

• Hiring Range: $159,528 - $191,454
• Discretionary bonus based on company performance

BENEFITS WE OFFER:

• Health insurance (medical, vision, dental and prescription drug)   
• Up to 22 days of Paid Time Off (PTO) in the first year 
• Eleven paid holidays in addition to PTO 
• 401(k) with Employer Match   
• Life, Short-Term Disability and Long-Term Disability insurance   
• Flexible Spending Accounts   
• 4 Hours of Volunteer Time Off per year   
• On-Demand Pay / Earned Wage Access  
• Free Premier RV AAA Washington Membership   
• Travel, Insurance, and Membership Discounts and Perks   
• Paid, on-going training throughout your career   
• THRIVE wellness program   
• Tax-advantaged commuter benefit   
• Free parking   
• Financial Literacy Education 

WORK ENVIRONMENT & PHYSICAL DEMANDS:

• Hybrid work from home and office required
• The physical environment is typical of a standard office space.  It requires the employee to work inside for the duration of work.  Must be able to remain in a stationary position, sitting for more than 50% of the time. This position will require occasionally moving about inside the office to access equipment, cabinets, etc. May work around office equipment which could be noisy, such as copiers and fax machines.

OTHER:

• Equipment used: Computer, phone, various virtual technologies, other office equipment
• Travel: Rarely Travel

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required.

DISCLAIMER:

Position/Job characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.