We use PostHog and Clarity to improve the site, and Meta Pixel to measure page views and ad effectiveness. Usage data may include page addresses and browser identifiers. You can opt out of collection at any time. Details in the Privacy Policy
Security Engineer / Lead at Stealth Startup · Trevo
More fit checks, tailored CVs, and complete prep for every role.
Job Description
About the role
We are looking for a highly skilled, hands-on Senior Security Engineer to own and engineer our internal security ecosystem across endpoints, identities, networks, cloud/on-prem infrastructure, R&D labs, and controlled production environments.
In this role, you will be the technical authority designing, building, and operating our technical security architecture. Working closely with an External CISO, IT, DevOps/Platform, and R&D teams, you will move seamlessly between high-level architectural design, deep incident investigation, and building automated security workflows.
What you'll do
Infrastructure & Network Security: Design and implement robust security architecture and segmentation across R&D networks, HPC, cloud (AWS/GCP), Kubernetes, on-prem, and air-gapped / isolated environments.
Identity & Access Management (IAM): Own identity security including IAM, SSO/MFA, service accounts, admin controls, PAM/JIT access, and lifecycle/offboarding visibility.
Visibility & Endpoint Protection: Establish reliable asset visibility and deploy, operate, and optimize EDR/XDR, SIEM/logging pipelines, MDM, vulnerability management, and system hardening.
Data Security & Resiliency: Protect sensitive R&D data across Google Workspace, networks, endpoints, and removable media (DLP, PKI, secrets controls). Improve backup/recovery and ransomware resilience.
Detection & Incident Response: Build detections, investigate incidents, lead containment/remediation, and drive continuous improvement.
Automation & Agentic Tooling: Leverage Python, PowerShell, Bash, and modern APIs/Agentic AI workflows to automate threat enrichment, evidence collection, and response actions.
Requirements
Civilian Commercial Experience: At least 4+ years of hands-on experience in a structured high-tech / commercial technology company. (Military technological unit background is an advantage).
Core Technical Depth: Strong, multi-domain hands-on expertise spanning Endpoint, Identity, Network, and Detection capabilities across both Linux and Windows.
Cloud & DevOps Security: Practical depth in Cloud (AWS/GCP), Kubernetes (K8s), Infrastructure as Code (Terraform), and CI/CD security integration.
Security Stack Fluency: Direct experience with SIEM/log pipelines, EDR/XDR, MDM (e.g., Intune/Jamf), IAM/SSO/PAM, ZTNA, and vulnerability management.
Automation & Scripting: Strong coding/scripting skills (Python, PowerShell, Bash) and API integrations. Experience with security automation or AI/agentic workflows operating on security telemetry is a major plus.
Problem Solver Mindset: Ability to handle complex R&D environments, isolated/air-gapped networks, or high-performance computing (HPC).